Описание
Prototype polluation in just-safe-set
Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution.
Пакеты
Наименование
just-safe-set
npm
Затронутые версииВерсия исправления
>= 1.0.0, < 2.2.2
2.2.2
Связанные уязвимости
CVSS3: 9.8
nvd
больше 4 лет назад
Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution.