CVE-2022-21213

CVE-2022-21213 affects all versions of the Mout package. The vulnerability arises in deepFillIn and deepMixIn, which recursively access target objects without validating the keys used to reach nested properties, enabling prototype pollution. The issue traces to an incomplete fix of CVE-2020-7792....

CVE-2020-7792

The CVE-2020-7792 entry applies to the mout package where the deepFillIn and deepMixIn functions perform recursive operations without properly checking the target property key. This enables Prototype Pollution across all versions of mout and can affect Object.prototype when exploited via recursiv...