Description
estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| remcohaszing | estree-util-value-to-estree | < 3.3.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | estree-util-value-to-estree | < 3.3.3 | 3.3.3 | GHSA-f7f6-9jq7-3rqj |