Blackprint @blackprint/engine Prototype Pollution issue

A Prototype Pollution issue in Blackprint @blackprint/engine 0.8.12 through 0.9.1 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

CVE-2024-24294

Summary: CVE-2024-24294 affects Blackprint @blackprint/engine, notably versions 0.8.12 through 0.9.1 (documented as v.0.9.0 in CVE records). The issue is a prototype pollution flaw in the _utils.setDeepProperty function in engine.min.js that enables an attacker to execute arbitrary code. Public r...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...