Description
akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @akbr/update | <= 1.0.0 | — | GHSA-mj4p-gmhr-92g3 |
Medium · 5.9
CVE-2024-36578
EUVD-2024-2110GHSA-mj4p-gmhr-92g3
@akbr/update Prototype Pollution
Published Jun 17, 2024 · Updated Aug 2, 2024 · Assigned by mitre