CVE-2021-26505

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function...

CVE-2021-26505

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function...

CVE-2021-26505

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function...

CVE-2021-26505

CVE-2021-26505 affects MrSwitch hello.js (v1.18.6). The vulnerability is a prototype pollution flaw in hello.utils.extend that allows remote code execution. Related advisories indicate fixes in v1.18.8 and later; higher-risk impact is confirmed (remote, no user interaction).