Description
Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor.
Remediation
References
https://hackerone.com/reports/980649
Related Vulnerabilities
CVE-2022-0144 Vulnerability in npm package shelljs
CVE-2016-10735 Vulnerability in maven package org.webjars.npm:bootstrap
CVE-2022-36914 Vulnerability in maven package org.jenkins-ci.plugins:files-found-trigger
CVE-2021-25738 Vulnerability in maven package io.kubernetes:client-java-parent
CVE-2013-7285 Vulnerability in maven package org.jbehave:jbehave-core