medium6.3
CVE-2024-38987
@aofl/cli-lib Prototype Pollution vulnerability
Impact
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @aofl/cli-lib | <= 4.0.0-alpha.45 | none recorded |