VDB
Sign up
MEDIUM5.4

GHSA-x6hx-7gh3-3q98

Prototype Pollution in mootools

Details

This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge()

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/mootools
Introduced in: 0

No fixed version published yet for mootools (npm). Pin to a known-safe version or switch to an alternative.

References