CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

CVE-2024-29650

The @thi.ng/paths library (version v.5.1.62 and before ) is vulnerable to arbitrary code execution due to a Prototype Pollution flaw (CWE-1321). The root cause involves improper control of dynamically-managed code resources during the handling of object properties in the mutIn and mutInManyUnsafe...