CVE-2021-25945

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25945

CVE-2021-25945 affects the npm module js-extend (versions 0.0.1–1.0.1). A prototype pollution flaw is described as enabling denial of service and potentially remote code execution. The connected sources reiterate the vulnerability and recommend avoiding js-extend, but no concrete patch/version is...