8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.2%
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.
github.com/xcritical-software/utilitify/commit/88d6e27009823338bf319ffb768fe6b08e8ad2d1
snyk.io/vuln/SNYK-JS-UTILITIFY-559497