Prototype pollution in supermixer

Description

Prototype pollution in Stampit supermixer allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.

Recommendation

Update the supermixer package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.0.5
• Patched version(s): 1.0.5

References

• GHSA-7prf-vw4p-qr59
• hackerone.com
• CVE-2020-24939
• CWE-1321
• CAPEC-310
• OWASP 2021-A6

Related Issues

• eivindfjeldstad-dot contains prototype pollution vulnerability - CVE-2020-7639
• Prototype Pollution in lodash - lodash-es - CVE-2020-8203
• Prototype Pollution in lodash - lodash - GHSA-p6mc-m468-83gw - CVE-2020-8203
• Prototype Pollution in decal - decal - CVE-2020-28449

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

supermixer