Description
Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | steal | <= 2.3.0 | — | GHSA-8f8g-9j73-7p82 |
Critical · 9.8
CVE-2022-37264
EUVD-2022-6742GHSA-8f8g-9j73-7p82
steal vulnerable to Prototype Pollution via optionName variable
Published Sep 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre