| Package | Affected versions | Patched versions |
|---|---|---|
| object-path | < 0.11.8 | 0.11.8 |
| object-path | < 0.11.8 | 0.11.8 |
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). The del() function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like toString on all objects.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free