Prototype pollution in supermixer

HIGH 7.5CVE-2020-24939 · GHSA-7prf-vw4p-qr59 · Published 16/06/2021 · updated 17/06/2026

In short

CVE-2020-24939 is a HIGH (CVSS 7.5) vulnerability affecting supermixer (stampit), supermixer.
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.4% of all vulnerabilities.
Fix: update to 1.0.5 or later.

Package	Affected versions	Patched versions
supermixer stampit	`= 1.0.3`	No fix yet
supermixer npm	`< 1.0.5`	`1.0.5`

Description

Prototype pollution in Stampit supermixer allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.

NVD description

Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.

References

nvd.nist.gov/vuln/detail/CVE-2020-24939 · ADVISORY
stampit-org/supermixer · WEB
stampit-org/supermixer commit 94dcc6f · WEB
hackerone.com/reports/959987 · WEB
stampit-org/supermixer · WEB
cwe.mitre.org/data/definitions/1321.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free