Prototype Pollution in cached-path-relative

The package cached-path-relative before 1.1.0 is vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

PT-2022-9406 · Unknown · Cached-Path-Relative

Name of the Vulnerable Software and Affected Versions: cached-path-relative versions prior to 1.1.0 Description: The issue allows for Prototype Pollution via the cache variable set as instead of Object.createnull in the cachedPathRelative function. This enables access to parent prototype properti...