← CVE Intelligence

CVE-2023-26102

n/a / rangy PUBLISHED

Description (CNA)

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype

Affected (CNA)

Vendor / productVersions
n/a / rangyaffected 0 before *

CWE

CWE-1321

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.