Description (CNA)
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / utilitify | affected All versions prior to 1.0.3 |
CWE
No CWE identifiers supplied.
References
- https://github.com/xcritical-software/utilitify/commit/88d6e27009823338bf319ffb768fe6b08e8ad2d1%2C
- https://snyk.io/vuln/SNYK-JS-UTILITIFY-559497
ADP enrichment
No English description supplied.