medium4.2
CVE-2020-7643
Prototype pollution in paypal-adaptive
Impact
paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. The PayPal function could be tricked into adding or modifying properties of Object.prototype using a `__proto__` payload.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | paypal-adaptive | <= 0.4.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idea | Paypal-Adaptive | through 0.4.2 |