@asephermann/capacitor-filechooser (0.0.1), @jewel998/mock-location (>=0.0.9, <=0.0.10) +53 more potentially affected by CVE-2021-29491 via mixme (>=0.0.1, <=0.4.0)

mixme NPM version =0.0.1, =0.0.9, =1.0.1, =0.0.1, =0.9.3-alpha.5, =0.0.1-alpha.1, =0.9.7-alpha.0, =0.8.1-alpha.0, =0.0.1-alpha.1, =0.2.1-alpha.1, =0.0.2-alpha.0, =0.0.2 and more Source cves: CVE-2021-29491 Source advisory: OSV:GHSA-79JW-6WG7-R9G4...

CVE-2021-29491

The CVE-2021-29491 entry concerns the mixme package for Node.js. Affected version: 0.5.0 (and earlier) allows an attacker to add or alter object properties via proto /proto in mutate/merge, enabling prototype pollution and potential DoS. The issue is fixed in version 0.5.1; upgrading to 0.5.1 or ...

CVE-2021-29491

...