Advisory Weakness Curation

Prototype Pollution in just-extend Versions of `just-extend` before 4.0.0 are vulnerable to prototype pollution. Provided certain input `just-extend` can add or modify properties of the `Object` prototype. These properties will be present on all objects. ## Recommendation Update to version `4.0.0` or later.

Injection Vulnerability A prototype pollution vulnerability was found in just-extend that allows an attack to inject properties onto `Object.prototype` through its functions.