20190403-utils (=1.0.0), @alex_xu/xdb (=0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (=1.0.0)

extend2 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils =1.0.0 - @alexxu/xdb =0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

CVE-2021-23568

creationtimestamp| type| source ---|---|--- 2022-01-10 16:21:10+00:00| seen| https://t.me/cibsecurity/35169...

CVE-2021-23568

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

CVE-2021-23568 Prototype Pollution

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

CVE-2021-23568

CVE-2021-23568 affects the JavaScript package extend2 (versions before 1.0.1). The vulnerability is a Prototype Pollution in the extend function caused by unsafe recursive merge, enabling an attacker to inject properties (such as proto ) into Object.prototype, potentially leading to DoS or remote...

20190403-utils (=1.0.0), @alex_xu/xdb (=0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (=1.0.0)

extend2 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils =1.0.0 - @alexxu/xdb =0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...