Prototype Pollution

utilities is vulnerable to Prototype Pollution. The vulnerability exists in the mix function of utilities/lib/core.js when the object is merged, which allows an attacker to cause prototype pollution...

mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

CVE-2023-26105 affects all versions of the mde utilities package. The root cause is a vulnerability in the _mix function used during object merging, enabling prototype pollution with high impact (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Multiple advisories and records (NVD, Red Hat, ...