CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

CVE-2024-24294

The Blackprint library, specifically the @blackprint/engine package, is vulnerable to a Prototype Pollution issue. This flaw exists in versions 0.8.12 through 0.9.1 (specifically noted as v.0.9.0 in some records) due to a lack of object type checks in the _utils.setDeepProperty (or DeepProperty) ...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...