Description
A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | mpath | <0.5.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | mpath | < 0.5.1 | 0.5.1 | GHSA-h466-j336-74wx |