CVE-2023-30857

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...

CVE-2023-30857

The CVE-2023-30857 issue concerns @aedart/support (Ion monorepo) with a prototype pollution risk in MetadataRecord when merged with a base class’ metadata via the meta decorator. Affected versions are prior to 0.6.1; the report notes exploitation likelihood is questionable because metadata can be...

CVE-2023-30857 @aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decorator

@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version 0.6.1, there is a possible prototype pollution issue for the MetadataRecord, when merged with a base class' metadata object, in meta decorator from the @aedart/support package. The...