Description
A vulnerability was found in LinkedIn dustjs prior to version 3.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’). The attack may be launched remotely.
Recommendation
Update the dustjs-linkedin package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.0.0
- Patched version(s): 3.0.0
References
Could your website be exposed too?
SmartScanner can check your website for dustjs-linkedin vulnerable to Prototype Pollution and gives you actionable findings to investigate.
Start a free scanRelated Issues
- mootools-more vulnerable to prototype pollution - CVE-2021-20088
- deep-defaults vulnerable to prototype pollution - CVE-2021-25944
- json-schema is vulnerable to Prototype Pollution - CVE-2021-3918
- npm package rfc6902 vulnerable to Prototype Pollution - CVE-2021-4245
You might also like:
See something that needs correcting? Let us knowUpdated January 28, 2023