Skip to content
OpenAdvisories
High · 7.7 CVE-2022-25301 EUVD-2022-4668GHSA-p3pg-64pv-v7jg

Prototype Pollution

Published May 1, 2022 · Updated Sep 17, 2024 · Assigned by snyk

Description

All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype.

Affected products

VendorProductAffectedFixed
— jsgui-lang-essentials < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm jsgui-lang-essentials <= 0.4.3 — GHSA-p3pg-64pv-v7jg

References