high8.1
CVE-2020-7644
fun-map through 3.3.1 is vulnerable to Prototype Pollution.
Impact
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fun-Map Project | Fun-Map | through 3.3.1 |