CRITICAL9.8
GHSA-m639-9whg-fw97
Prototype Pollution in object-extend
Details
The package object-extend from 0.0.0 through 0.5.0 is vulnerable to Prototype Pollution via object-extend.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/object-extend
Introduced in:
0No fixed version published yet for object-extend (npm). Pin to a known-safe version or switch to an alternative.