@angular-materials/ngx-admin (>=1.0.0 <=1.0.1), @bndynet/bbootstrap (>=1.1.0 <=2.2.1) +41 more potentially affected by CVE-2024-53391 via pace-js (>=1.0.2 <=1.2.4)

pace-js NPM version =1.0.2, =1.0.0, =1.1.0, =1.0.0, =1.0.1, =0.0.0, =0.0.1, =2.0.2, =14.0.1, =1.0.4, =1.0.4, =1.0.114, =0.1.0, =0.20.0 - freeman-admintheme =1.2.1 and more Source cves: CVE-2024-53391 Source advisory: SNYK:JS-PACEJS-8136829...

Prototype Pollution

Overview org.webjars.npm:pace-js is an Automatically add a progress bar to your site. Affected versions of this package are vulnerable to Prototype Pollution via the extend function, which recursively copies key-value pairs from the source object without properly validating property names. An...

Prototype Pollution

Overview pace-js is an Automatically add a progress bar to your site. Affected versions of this package are vulnerable to Prototype Pollution via the extend function, which recursively copies key-value pairs from the source object without properly validating property names. An attacker can exploi...