1 results (0.003 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

01 Jul 2024 — 2o3t-utility v0.1.2 was discovered to contain a prototype pollution via the function extend. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. • https://gist.github.com/mestrtee/a2be744675af5ece3240c19fd04fc5e1 • CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') •