EUVD-2021-1026

Malware in sbrugna...

GHSA-9829-JJ5P-J6HF Prototype Pollution in worksmith

All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7725

Worksmith is vulnerable to a prototype pollution flaw via the setValue function. Affected versions are all prior to 1.0.1 (up to 1.0.0). The issue enables pollution of Object.prototype through unsafe merging or path-based setting, with potential to impact application behavior. Remediation guidanc...