High · 8.2 CVE-2023-26133 EUVD-2023-1747GHSA-89qm-hm2x-mxm3

progressbar.js vulnerable to Prototype Pollution

Published Jun 12, 2023 · Updated Jan 6, 2025 · Assigned by snyk

Description

All versions of the package progressbar.js are vulnerable to Prototype Pollution via the function extend() in the file utils.js.

Vendor	Product	Affected	Fixed
—	progressbar.js	—	—

Ecosystem	Package	Affected	Fixed	Record
npm	progressbar.js	< 1.1.1	1.1.1	GHSA-89qm-hm2x-mxm3