steal vulnerable to Prototype Pollution via alias variable

Description

Prototype pollution vulnerability in stealjs steal via the alias variable in babel.js.

Recommendation

No fix is available yet. Followings are affected versions:

<= 2.3.0

References

Could your website be exposed too?

SmartScanner can check your website for steal vulnerable to Prototype Pollution via alias variable and gives you actionable findings to investigate.

Start a free scan

Related Issues

steal vulnerable to Prototype Pollution via requestedVersion variable - CVE-2022-37257
steal vulnerable to Prototype Pollution via key variable in babel.js - CVE-2022-37266
steal vulnerable to Prototype Pollution via optionName variable - CVE-2022-37264
steal vulnerable to Regular Expression Denial of Service via input variable - CVE-2022-37260

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated January 31, 2023