Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-25914 EUVD-2021-0629GHSA-85g2-29m8-qf2p

Prototype Pollution Vulnerability in object-collider

Published Mar 1, 2021 · Updated Apr 30, 2025 · Assigned by Mend

Description

Prototype pollution vulnerability in 'object-collider' versions 1.0.0 through 1.0.3 allows attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— object-collider 1.0.0, 1.0.1, 1.0.2, 1.0.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm object-collider >= 1.0.0, < 1.0.4 1.0.4 GHSA-85g2-29m8-qf2p

References