Skip to content
OpenAdvisories

Package · npm

web3-utils

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    web3-utils Prototype Pollution vulnerability

    Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of t…