CVE-2020-7737

All versions of package safetydance are vulnerable to Prototype Pollution via the set function...

CVE-2020-7737

CVE-2020-7737 affects the npm package safetydance (all versions) and is a Prototype Pollution vulnerability caused by unsafe handling in the library’s set function. The provided connected documents confirm that attackers could inject properties into the prototype chain (e.g., via proto ), potenti...