Lucene search

K
osvGoogleOSV:GHSA-77XQ-CPVG-7XM2
HistoryMay 10, 2021 - 7:07 p.m.

Prototype pollution in @tsed/core

2021-05-1019:07:56
Google
osv.dev
10

0.006 Low

EPSS

Percentile

78.8%

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

CPENameOperatorVersion
@tsed/corelt5.65.7

0.006 Low

EPSS

Percentile

78.8%

Related for OSV:GHSA-77XQ-CPVG-7XM2