@jsmodules/storage (>=2.0.1, <=2.0.3), @snowmonkey/plugin-rxdb (0.0.3) potentially affected by CVE-2020-35149 via rxdb (>=9.6.0, <=9.7.1)

rxdb NPM version =9.6.0, =2.0.1, =2.0.3 - @snowmonkey/plugin-rxdb 0.0.3 Source cves: CVE-2020-35149 Source advisory: SNYK:JS-RXDB-1050985...

Prototype Pollution

Overview rxdb is a RxDB short for Reactive Database is a NoSQL-database for JavaScript Applications like Websites, hybrid Apps, Electron-Apps, Progressive Web Apps and NodeJs. Affected versions of this package are vulnerable to Prototype Pollution via the merge function within lib/utils.js...