medium6.5
CVE-2024-38997
adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults
Impact
adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @adolph_dudu/ratio-swiper | = 0.0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Swiperjs | Swiper | Version 0.0.2 |