GHSA-4hq8-jgr8-mw9jHighCVSS 7.8

grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload

Published
July 18, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

📋 Description

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

🎯 Affected products1

  • npm/grunt-util-property:<= 0.0.2

🔗 References (4)