Skip to content
OpenAdvisories

Package · npm

magix-combine-ex

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    magix-combine-ex vulnerable to prototype pollution

    A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum cons…