0.001 Low
EPSS
Percentile
31.9%
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The ‘a’ function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
__proto__
github.com/remy/undefsafe
github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822
nvd.nist.gov/vuln/detail/CVE-2019-10795
snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940