@thi.ng/paths Prototype Pollution vulnerability · CVE-2024-29650 · GitHub Advisory Database · GitHub

@thi.ng/paths Prototype Pollution vulnerability

High severity GitHub Reviewed Published Mar 25, 2024 to the GitHub Advisory Database • Updated Mar 25, 2024

Package

@thi.ng/paths (npm)

Affected versions

< 5.1.63

Patched versions

5.1.63

Description

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components.

References

Published by the National Vulnerability Database

Mar 25, 2024

Published to the GitHub Advisory Database Mar 25, 2024

Last updated Mar 25, 2024

Reviewed Mar 25, 2024