Prototype Pollution Flaw in json8-merge-patch Package by npm

CVE-2020-8268

What is CVE-2020-8268?

The json8-merge-patch npm package is affected by a prototype pollution vulnerability that enables attackers to inject or modify methods and properties of the global object constructor. This flaw can lead to unexpected behavior in applications using this package, potentially compromising security and integrity. Version 1.0.3 and earlier are impacted, making it essential for developers to update to mitigate risks associated with this vulnerability.

References