adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

Description

adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Recommendation

No fix is available yet. Followings are affected versions:

• = 0.0.2

References

• GHSA-88vr-hjqx-57qh
• CVE-2024-38997
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• akbr patch-into was discovered to contain a prototype pollution via the function patchInto - CVE-2024-38991
• jsonic was discovered to contain a prototype pollution via the function empty. - CVE-2024-38993
• Prototype pollution in ag-grid-community via the _.mergeDeep function - CVE-2024-38996
• Prototype pollution in ag-grid-community via the _.mergeDeep function - ag-grid-enterprise - CVE-2024-38996

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@adolph_dudu/ratio-swiper