漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Prototype Pollution
Vulnerability Description
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544).
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
Mout 安全漏洞
Vulnerability Description
Mout是Mout团队的一个基于Javascript的为JS编程提供模块支持的代码库。 Mout存在安全漏洞,该漏洞源于在deepFillIn函数用于“fill missing properties recursively”,同时deepMixIn将对象混合到目标对象中,同时递归地混合现有的子对象时,不会检查用于递归访问目标对象的密钥。
CVSS Information
N/A
Vulnerability Type
N/A