← All advisories

Medium severity5.6NVD Advisory· Published Jun 17, 2021· Updated Jun 17, 2026

CVE-2021-23396

CVE-2021-23396

Description

All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
lutilsnpm	<= 2.4.0	—

Affected products

3

Lutils Project/Lutils
cpe:2.3:a:lutils_project:lutils:*:*:*:*:*:node.js:*:*
lutils/lutilsdescription
ghsa-coords
pkg:npm/lutils
Range: <= 2.4.0

Patches

Vulnerability mechanics

References

3

snyk.io/vuln/SNYK-JS-LUTILS-1311023nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-3r8w-mphv-2f3fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23396ghsaADVISORY

News mentions

0

No linked articles in our index yet.