← All advisories

Medium severity5.4GHSA Advisory· Published Aug 24, 2021· Updated Jun 17, 2026

CVE-2021-23432

CVE-2021-23432

Description

This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge()

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mootoolsnpm	<= 1.5.2	—

Affected products

3

Vsviridov/Mootools NodeGHSA
Range: <= 1.5.2
Mootools Project/Mootools
cpe:2.3:a:mootools_project:mootools:*:*:*:*:*:node.js:*:*
ghsa-coords
pkg:npm/mootools
Range: <= 1.5.2

Patches

Vulnerability mechanics

References

3

snyk.io/vuln/SNYK-JS-MOOTOOLS-1325536nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-x6hx-7gh3-3q98ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23432ghsaADVISORY

News mentions

0

No linked articles in our index yet.