CVE-2024-39008

A flaw was found in the fast-loops Node.js package. This flaw allows an attacker to alter the behavior of all objects inheriting from the affected prototype by passing arguments to the objectMergeDeep function crafted with the built-in property: proto. This issue can potentially lead to a denial ...

GHSA-3Q56-9CC2-46J4 robinweser fast-loops vulnerable to prototype pollution

robinweser fast-loops v1.1.3 was discovered to contain a prototype pollution via the function objectMergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Fast Loops Security Vulnerability

Fast Loops is a collection of small, high-performance and immutable iterative utilities for arrays and objects from the individual developer Robin Weser. A security vulnerability exists in Fast Loops v1.1.3, which stems from the inclusion of prototype contamination via the function objectMergeDee...