Prototype Pollution Vulnerability in Undefsafe by Remy

CVE-2019-10795

What is CVE-2019-10795?

The Undefsafe package, prior to version 2.0.3, is susceptible to a security issue known as Prototype Pollution. An attacker could exploit the 'a' method to manipulate or add properties to Object.prototype using a specially crafted proto payload, potentially compromising the integrity of applications that rely on this functionality. It is crucial for developers using Undefsafe to update to the latest version to mitigate this risk.

References