critical9.8
CVE-2021-25914
Prototype Pollution Vulnerability in object-collider
Impact
Prototype pollution vulnerability in 'object-collider' versions 1.0.0 through 1.0.3 allows attacker to cause a denial of service and may lead to remote code execution.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | object-collider | >= 1.0.0, < 1.0.4 | 1.0.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fireblink | Object-Collider | from 1.0.0 through 1.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/FireBlinkLTD/object-collider/commit/321f75a7f8e7b3393e5b7dd6dd9ab26ede5906e5
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25914
- https://github.com/advisories/GHSA-85g2-29m8-qf2p
- https://nvd.nist.gov/vuln/detail/CVE-2021-25914