Description
Prototype pollution vulnerability in function extend in babel.js in stealjs steal via the key variable in babel.js.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 2.3.0
References
Related Issues
- Vite has an `server.fs.deny` bypass with an invalid `request-target` - CVE-2025-32395
- Redwood is vulnerable to account takeover via dbAuth "forgot-password - Vulnerability
- Marp Core allows XSS by improper neutralization of HTML sanitization - CVE-2024-56510
- bootstrap Cross-site Scripting vulnerability (GHSA-ph58-4vrj-w6hr) 2 - CVE-2018-20677
- Tags:
- npm
- steal
Anything's wrong? Let us know Last updated on January 30, 2023