Prototype Pollution in @fabiocaccamo/utils.js

CRITICAL 9.8CVE-2021-3815 · GHSA-3xph-cp8f-2229 · Published 08/12/2021 · updated 17/06/2026

In short

CVE-2021-3815 is a CRITICAL (CVSS 9.8) vulnerability affecting utils.js (utils.js project), @fabiocaccamo/utils.js.
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 59.1% of all vulnerabilities.
Fix: update to 0.17.2 or later.

Package	Affected versions	Patched versions
utils.js utils.js_project	`< 0.17.2`	`0.17.2`
@fabiocaccamo/utils.js npm	`< 0.17.2`	`0.17.2`

utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

NVD description

utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Running one of these products? Scan your site to see whether it exposes a vulnerable version.