high7.5
CVE-2021-23426
Prototype Pollution in Proto
Impact
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | Proto | <= 1.1.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proto Project | Proto | All versions |