Skip to content

Prototype pollution in configya.js #24

@lelecolacola123

Description

@lelecolacola123

I found the prototype pollution in configya.js,the function deepMerge() in configya/src/configya.js in configya2.0.3.
The function deepMerge() lead to Prototype pollution in line10. Hopefully, you can modify your code to avoid the risk of this vulnerability

https://cheatsheetseries.owasp.org/cheatsheets/Prototype_Pollution_Prevention_Cheat_Sheet.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions