Prototype Pollution

Overview @fluentui/styles is a set of styling utilities for CSS-in-JS. Affected versions of this package are vulnerable to Prototype Pollution. The deepmerge function available within the styles package of FluentUI allows one object to merge with another recursively. Given a value such as proto,...

@fluentui/local-sandbox (>=0.31.1-alpha.6224, <=0.45.0), @fluentui/react (>=0.31.1-alpha.6224, <=0.46.0) +6 more potentially affected by unknown CVE via @fluentui/styles (>=0.31.1-alpha.6224, <=0.49.0)

@fluentui/styles NPM version =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.31.1-alpha.6224, =0.47.6, =0.47.0, =0.47.4, =0.1.0, =2.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-FLUENTUISTYLES-570808...