@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @goodcastle/api-plugin-epayco-cash (>=0.0.3, <=0.2.5) +28 more potentially affected by CVE-2020-7742 via simpl-schema (>=1.4.1, <=1.8.1)

simpl-schema NPM version =1.4.1, =1.0.0, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - @idigi/reaction-plugin-newsletters 0.0.2 and more Source cves: CVE-2020-7742 Source advisory: OSV:GHSA-9MX2-PRFP-8HQP...

CVE-2020-7742

This affects the package simpl-schema before 1.10.2...

CVE-2020-7742 Prototype Pollution

This affects the package simpl-schema before 1.10.2...

CVE-2020-7742

CVE-2020-7742 affects the JavaScript package simpl-schema up to version 1.10.1. The vulnerability is a prototype pollution flaw in the library's merge logic (used for merging inputs into schemas), allowing attacker-controlled input to mutate Object.prototype and potentially lead to remote code ex...

@demandcluster/api-plugin-files (>=1.0.0, <=1.0.4), @goodcastle/api-plugin-epayco-cash (>=0.0.3, <=0.2.5) +28 more potentially affected by CVE-2020-7742 via simpl-schema (>=1.4.1, <=1.8.1)

simpl-schema NPM version =1.4.1, =1.0.0, =0.0.3, =1.0.8, =0.0.9, =1.0.5, =1.2.3, =1.0.3, =0.0.1, =1.0.2, =1.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.7 - @idigi/reaction-plugin-newsletters 0.0.2 and more Source cves: CVE-2020-7742 Source advisory: SNYK:JS-SIMPLSCHEMA-1016157...