Home > Vulnerability Database > WS-2020-0079

WhiteSource Vulnerability Database

WS-2020-0079

Good to know:

Date: May 20, 2020

unflatten through 1.0.4 is vulnerable to prototype pollution. The function unflatten does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.

Language: JS

Severity Score

0.0

Related Resources (2)

Url: https://www.npmjs.com/advisories/1329

Url: https://www.whitesourcesoftware.com/vulnerability-database/WS-2020-0079

Weakness Type (CWE)

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CWE-1321

Top Fix

Upgrade Version

No fix version available