Lucene search

K
osvGoogleOSV:GHSA-GJM5-83CW-P3P2
HistoryJan 12, 2022 - 10:59 p.m.

Prototype Pollution in extend2

2022-01-1222:59:13
Google
osv.dev
8

0.006 Low

EPSS

Percentile

78.2%

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.

CPENameOperatorVersion
extend2lt1.0.1

0.006 Low

EPSS

Percentile

78.2%

Related for OSV:GHSA-GJM5-83CW-P3P2