Описание
component-flatten vulnerable to Prototype Pollution
All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Пакеты
Наименование
component-flatten
npm
Затронутые версииВерсия исправления
<= 1.0.1
Отсутствует
Связанные уязвимости
CVSS3: 6.3
nvd
почти 6 лет назад
All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.