high7.7
CVE-2022-25301
Prototype Pollution in jsgui-lang-essentials
Impact
All versions of package `jsgui-lang-essentials` are vulnerable to Prototype Pollution due to allowing all `Object` attributes to be altered, including their magical attributes such as `proto`, `constructor` and `prototype`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | jsgui-lang-essentials | <= 0.4.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jsgui-Lang-Essentials Project | Jsgui-Lang-Essentials | All versions |