Description
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | fun-map | All versions including 3.3.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | fun-map | <= 3.3.1 | — | GHSA-p33m-7w7f-gmj8 |