@adhawk/analytics-pixel-loader (>=0.0.2, <=2.0.2), @adhawk/analytics.js-integration-freshdesk (0.1.0) +142 more potentially affected by CVE-2024-57066 via @ndhoule/defaults (2.0.1)

@ndhoule/defaults NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @ndhoule/defaults and may be impacted: - @adhawk/analytics-pixel-loader =0.0.2, =1.2.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =1.1.0 -...

CVE-2024-57066

The @ndhoule/defaults library, version 2.0.1 , is vulnerable to Prototype Pollution via the lib.deep function. The root cause is the improper handling of object properties when copying values from a source object to a target object; specifically, when an enumerable property owned on a source obje...

CVE-2024-57066

A prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57066

A prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57066: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

WS-2021-0091

Prototype pollution vulnerability in @ndhoule/defaults versions 1.1.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...