CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38997

The adolph_dudu ratio-swiper library, specifically version v0.0.2 , is vulnerable to prototype pollution through the extendDefaults function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary ...