Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-7638

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-jgpq-g82g-6c39

confinit vulnerable to prototype pollution confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

gitlab/npm/confinit/CVE-2020-7638

Improper Input Validation confinit is vulnerable to Prototype Pollution. The `setDeepProperty` function could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.