Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-35149

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-45q2-34rf-mr94

Code Injection in mquery lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.

gitlab/npm/mquery/CVE-2020-35149

Object Parameter Pollution The `lib/utils.js` in mquery allows a pollution attack because a special property (e.g., `__proto__`) can be copied during a merge or clone operation.