Skip to main content
cve.nowby Sazabi
← npm
npmPackage

utils-extend

2 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical
Registry
npm

Advisories 2

  • CVE-2024-57077Critical 9.1

    The latest version of utils-extend (1.0.8) is vulnerable to Prototype Pollution through the entry function(s) lib.extend.

    Affected: through 1.0.8.

  • Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in…

    Affected: all versions.