Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40firebase/util@0.2.17
purl pkg:npm/%40firebase/util@0.2.17
Next non-vulnerable version 0.3.4
Latest non-vulnerable version 0.3.4
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-8nbj-2ajq-nya7
Aliases:
CVE-2020-7765
GHSA-fpm5-vv97-jfwg
Prototype Pollution This affects the package `@firebase/util` This vulnerability relates to the deepExtend function within the `DeepCopy.ts` file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
0.3.4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:41:16.306734+00:00 GitLab Importer Affected by VCID-8nbj-2ajq-nya7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/@firebase/util/CVE-2020-7765.yml 38.6.0