Description
Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | json8-merge-patch | Fixed Version: 1.0.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | json8-merge-patch | < 1.0.3 | 1.0.3 | GHSA-8v9x-9xqg-r8mr |