Description
Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor.
Remediation
References
https://hackerone.com/reports/980649
Related Vulnerabilities
CVE-2023-50449 Vulnerability in maven package com.jfinal:jfinal
CVE-2020-8205 Vulnerability in npm package @uppy/companion
CVE-2023-29003 Vulnerability in npm package @sveltejs/kit
CVE-2020-35199 Vulnerability in maven package org.igniterealtime.openfire.plugins:bookmarks
CVE-2023-42795 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core