medium6.3
CVE-2019-10795
undefsafe before 2.0.3 is vulnerable to Prototype Pollution.
Impact
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Undefsafe Project | Undefsafe | before 2.0.3 |