← All advisories

High severity7.3GHSA Advisory· Published Jul 2, 2021· Updated Jun 17, 2026

CVE-2021-23403

CVE-2021-23403

Description

All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge() function due to lack of validation input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ts-nodashnpm	< 1.2.7	1.2.7

Affected products

3

Badopcode/NodashGHSA
Range: < 1.2.7
Ts Nodash Project/Ts Nodash
cpe:2.3:a:ts-nodash_project:ts-nodash:*:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/ts-nodash
Range: < 1.2.7

Patches

Vulnerability mechanics

References

5

github.com/BadOPCode/NoDash/blob/master/src/Merge.tsnvdExploitThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-TSNODASH-1311009nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-5xjx-4xcm-hpcmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23403ghsaADVISORY
github.com/BadOPCode/NoDash/commit/b9cc2b3b49f6cd5228e406bc57e17a28b998fea5ghsaWEB

News mentions

0

No linked articles in our index yet.