Skip to content
OpenAdvisories

Package · npm

@intlify/shared

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

    @intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared (10.0.4) is vulnerable to Prototype Pollution through the entry function(s) lib.deepCopy. An attacker can supply a payload with Object.prototype setter to intro…