CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

CVE-2023-26105 affects all versions of the mde utilities package. The root cause is a vulnerability in the _mix function used during object merging, enabling prototype pollution with high impact (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Multiple advisories and records (NVD, Red Hat, ...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

10.13zy1 (=1.0.0), @luminati-io/jake (>=8.0.10-lum.0 <=8.0.10-lum.2) +70 more potentially affected by CVE-2023-26105 via utilities (>=0.0.26 <=1.0.6)

utilities NPM version =0.0.26, =8.0.10-lum.0, =8.0.19-sync, =2.1.0, =0.0.3, =1.1.0, =0.1.0, =0.0.1, =0.0.1, =1.0.0, =0.1.0, =1.0.0, =2.2.0 and more Source cves: CVE-2023-26105 Source advisory: SNYK:JS-UTILITIES-3184491...