Description
Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.
Remediation
References
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25945
Related Vulnerabilities
CVE-2022-1330 Vulnerability in maven package org.webjars.bower:fullpage.js
CVE-2021-34081 Vulnerability in npm package gitsome
CVE-2021-32684 Vulnerability in npm package magento-scripts
CVE-2021-21414 Vulnerability in npm package sdk
CVE-2023-3691 Vulnerability in maven package org.webjars.bowergithub.diguoyihao:layui