CVE-2021-23448

CVE-2021-23448 affects the JavaScript package config-handler. All versions are vulnerable to Prototype Pollution when loading configuration files due to unsafe object merges or path-based property assignment that can modify Object.prototype. Documented impacts include potential DoS or remote code...

CVE-2021-23448

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files...

PT-2021-15532

Name of the Vulnerable Software and Affected Versions config-handler versions all Description The issue concerns Prototype Pollution when loading config files. This affects the config-handler package. Recommendations For all versions, consider restricting the loading of config files or temporaril...

CVE-2021-23448: Improperly Controlled Modification of Object Prototype Attributes

All versions of package config-handler are vulnerable to Prototype Pollution when loading config files...