antfu/utils vulnerable to prototype pollution

Description

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.

Recommendation

Update the @antfu/utils package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.7.3
• Patched version(s): 0.7.3

References

• GHSA-p2fh-2h23-6grg
• huntr.dev
• CVE-2023-2972
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• dottie vulnerable to Prototype Pollution - CVE-2023-26132
• rangy vulnerable to Prototype Pollution - CVE-2023-26102
• mockjs vulnerable to Prototype Pollution via the Util.extend function - CVE-2023-26158
• progressbar.js vulnerable to Prototype Pollution - CVE-2023-26133

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@antfu/utils