Lucene search
+L
Object-extend ProjectObject-extend

1 matches found

CVE
CVE
added 2022/02/18 8:0 p.m.103 views

CVE-2021-23702

CVE-2021-23702 relates to a Prototype Pollution vulnerability in the object-extend package. Public documentation across multiple sources confirms the flaw exists in the extend function of object-extend, enabling an attacker to inject properties into Object.prototype (e.g., via proto ), potentiall...

9.8CVSS8.7AI score0.01378EPSS
Save