11zwheat (=0.2.6), barley (=0.0.1) +28 more potentially affected by CVE-2021-23426 via proto (>=1.0.17 <=1.0.19)

proto NPM version =1.0.17, =1.0.0, =1.0.4, =1.0.1, =1.0.0, =2.0.0, =0.0.1, =0.0.1, =1.1.0, =2.0.0, =2.0.1 and more Source cves: CVE-2021-23426 Source advisory: OSV:GHSA-58G2-9FQR-36Q2...

CVE-2021-23426

This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...

CVE-2021-23426

Proto is vulnerable to prototype pollution via the merge function across all versions. The root cause is an unsafe recursive merge (and related path-based pollution) that can inject properties into Object.prototype (proto , constructor, prototype). Potential impact includes DoS and possible remot...

11zwheat (=0.2.6), barley (=0.0.1) +28 more potentially affected by CVE-2021-23426 via proto (>=1.0.17 <=1.0.19)

proto NPM version =1.0.17, =1.0.0, =1.0.4, =1.0.1, =1.0.0, =2.0.0, =0.0.1, =0.0.1, =1.1.0, =2.0.0, =2.0.1 and more Source cves: CVE-2021-23426 Source advisory: SNYK:JS-PROTO-1316301...