VDB
Sign up
HIGH7.3

GHSA-h3rx-g5c9-8q4x

Prototype Pollution in bmoor

Quick fix

GHSA-h3rx-g5c9-8q4x — bmoor: upgrade to the fixed version with the command below.

npm install bmoor@0.8.12

Details

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/bmoor
Introduced in: 0Fixed in: 0.8.12
Fixnpm install bmoor@0.8.12

References