Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-25928 EUVD-2021-1417GHSA-wpgh-hmv4-r3v5

Prototype pollution in safe-obj

Published Apr 26, 2021 · Updated Apr 30, 2025 · Assigned by Mend

Description

Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— safe-obj 1.0.0, 1.0.1, 1.0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm safe-obj >= 1.0.0, <= 1.0.2 — GHSA-wpgh-hmv4-r3v5

References