Prototype Pollution in safe-object2

Description

All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.0.3

References

• GHSA-jpq3-xf27-5jf2
• snyk.io
• CVE-2020-7726
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Prototype Pollution in safe-object2 - safe-object2 - Vulnerability
• Prototype Pollution in deephas - CVE-2020-28271
• dset vulnerable to prototype pollution - CVE-2020-28277
• shvl vulnerable to prototype pollution - CVE-2020-28278

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

safe-object2