Skip to content
OpenAdvisories
High · 7.3 CVE-2021-23558 EUVD-2022-0816GHSA-4m8h-h59m-m34jSNYK-JS-BMOOR-2342622

Prototype Pollution

Published Jan 28, 2022 · Updated Sep 16, 2024 · Assigned by snyk

Description

The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664)

Affected packages

EcosystemPackageAffectedFixedRecord
npm bmoor < 0.10.1 0.10.1 GHSA-4m8h-h59m-m34j

References