Description
Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.
Remediation
References
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25945
Related Vulnerabilities
CVE-2022-41854 Vulnerability in maven package org.yaml:snakeyaml
CVE-2023-28155 Vulnerability in maven package org.webjars.bower:request
CVE-2023-34238 Vulnerability in npm package gatsby-cli
CVE-2021-21120 Vulnerability in npm package electron
CVE-2018-19057 Vulnerability in maven package org.webjars.npm:simplemde