Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40firebase/util@0.3.4
purl pkg:npm/%40firebase/util@0.3.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-8nbj-2ajq-nya7 Prototype Pollution This affects the package `@firebase/util` This vulnerability relates to the deepExtend function within the `DeepCopy.ts` file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program. CVE-2020-7765
GHSA-fpm5-vv97-jfwg

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T17:36:22.398871+00:00 GithubOSV Importer Fixing VCID-8nbj-2ajq-nya7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/05/GHSA-fpm5-vv97-jfwg/GHSA-fpm5-vv97-jfwg.json 38.6.0
2026-06-04T16:20:36.004083+00:00 GitLab Importer Fixing VCID-8nbj-2ajq-nya7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/@firebase/util/CVE-2020-7765.yml 38.6.0