{"id": "GHSA-6FH5-8WQ8-W3WR", "bulletinFamily": "software", "title": "Prototype Pollution in unflatten", "description": "All versions of `unflatten` are vulnerable to prototype pollution. The function `unflatten` does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.\n\n\n\n\n## Recommendation\n\nNo fix is currently available. Consider using an alternative package until a fix is made available.", "published": "2020-09-04T15:09:55", "modified": "2020-09-04T15:09:55", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://github.com/advisories/GHSA-6fh5-8wq8-w3wr", "reporter": "GitHub Advisory Database", "references": ["https://www.npmjs.com/advisories/1329", "https://github.com/advisories/GHSA-6fh5-8wq8-w3wr"], "cvelist": [], "type": "github", "lastseen": "2020-09-04T18:56:26", "edition": 1, "viewCount": 10, "enchantments": {"dependencies": {"references": [{"type": "github", "idList": ["GHSA-6FH5-8WQ8-W3WR"]}, {"type": "nodejs", "idList": ["NODEJS:1329"]}], "modified": "2020-09-04T18:56:26", "rev": 2}, "score": {"value": 5.0, "vector": "NONE", "modified": "2020-09-04T18:56:26", "rev": 2}, "vulnersScore": 5.0}, "affectedSoftware": [{"name": "unflatten", "operator": "lt", "version": "0"}]}

{}