VDB
Sign up
CRITICAL9.8

GHSA-5pxj-mhwj-x5gv

Prototype Pollution in asciitable.js

Quick fix

GHSA-5pxj-mhwj-x5gv — asciitable.js: upgrade to the fixed version with the command below.

npm install asciitable.js@1.0.3

Details

The package asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function.

### PoC ```js var a = require("asciitable.js"); var b = JSON.parse('{"__proto__":{"test":123}}'); a({},b); console.log({}.test) ```

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/asciitable.js
Introduced in: 0Fixed in: 1.0.3
Fixnpm install asciitable.js@1.0.3

References