0.035 Low
EPSS
Percentile
91.6%
jQuery before 3.4.0 mishandles jQuery.extend(true, {}, …) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.
CPE | Name | Operator | Version |
---|---|---|---|
component: jquery | eq | 3.4.0 |
0.035 Low
EPSS
Percentile
91.6%