Description
Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | steal | <= 2.3.0 | — | GHSA-vwhq-pm3r-fjm9 |
Critical · 9.8
CVE-2022-37266
EUVD-2022-6952GHSA-vwhq-pm3r-fjm9
steal vulnerable to Prototype Pollution via key variable in babel.js
Published Sep 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre