Prototype Pollution

@agreejs/shared is vulnerable to Prototype Pollution. The vulnerability is due to missing checks in the mergeInternalComponents function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2024-28327 · Agreejs · Agreejs

Name of the Vulnerable Software and Affected Versions: agreejs shared version 0.0.1 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the mergeInternalComponents...