Description (CNA)
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / fun-map | affected All versions including 3.3.1 |
CWE
No CWE identifiers supplied.
References
- https://github.com/nathan7/fun-map/blob/master/index.js#L137%2C
- https://snyk.io/vuln/SNYK-JS-FUNMAP-564436
ADP enrichment
No English description supplied.