CVE-2021-23561

creationtimestamp| type| source ---|---|--- 2021-12-10 22:25:25+00:00| seen| https://t.me/cibsecurity/33765...

CVE-2021-23561

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...

CVE-2021-23561

CVE-2021-23561 affects the npm package comb, where the deepMerge() function enables Prototype Pollution. The vulnerability arises from unsafe recursive merge and path-based property assignment, allowing an attacker to modify Object.prototype properties (e.g., proto , constructor, prototype). Docu...

CVE-2021-23561 Prototype Pollution

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...

@questwork/authenticator (>=0.1.0, <=0.1.5), @questwork/qw-service-tools (>=0.0.8, <=0.1.4) +22 more potentially affected by CVE-2021-23561 via comb (>=0.0.6, <=2.0.0)

comb NPM version =0.0.6, =0.1.0, =0.0.8, =0.0.1, =1.0.3, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2021-23561 Source advisory: SNYK:JS-COMB-1730083...