Description
Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona.
Remediation
References
https://hackerone.com/reports/778414
Related Vulnerabilities
CVE-2021-23395 Vulnerability in npm package nedb
CVE-2021-23664 Vulnerability in npm package @isomorphic-git/cors-proxy
CVE-2020-28480 Vulnerability in maven package org.webjars.npm:jointjs
CVE-2023-2479 Vulnerability in npm package appium-desktop
CVE-2022-36437 Vulnerability in maven package com.hazelcast:hazelcast-enterprise