Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-7637

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6gp3-h3jj-prx4

Prototype pollution in class-transformer class-transformer through 0.2.3 is vulnerable to Prototype Pollution. The 'classToPlainFromExist' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

gitlab/npm/class-transformer/CVE-2020-7637

Improper Input Validation class-transformer is vulnerable to Prototype Pollution. The `classToPlainFromExist` function could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.