CVE-2021-25953

Prototype pollution vulnerability in 'putil-merge' versions1.0.0 through 3.6.6 allows attacker to cause a denial of service and may lead to remote code execution...

hixtory (1.0.0), ncfg (>=0.0.1, <=0.12.1) +2 more potentially affected by CVE-2021-25953 via putil-merge (>=1.2.0, <=2.2.0)

putil-merge NPM version =1.2.0, =0.0.1, =0.9.1, =1.5.2, =2.10.5 Source cves: CVE-2021-25953 Source advisory: OSV:GHSA-9X7M-9HPG-XXMW...

CVE-2021-25953

creationtimestamp| type| source ---|---|--- 2021-07-14 14:20:21+00:00| seen| https://t.me/cibsecurity/26137...

CVE-2021-25953

Summary: CVE-2021-25953 affects the JavaScript utility library putil-merge . Affected versions are 1.0.0 through 3.6.6 . Root cause: prototype pollution in the merge logic of putil-merge, enabling property contamination of built-in prototypes. Impact (as stated): denial of service and potential r...