VYPR
Critical severity9.8GHSA Advisory· Published May 20, 2024· Updated Jun 17, 2026

CVE-2024-24294

CVE-2024-24294

Description

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the _utils.setDeepProperty function of engine.min.js.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
@blackprint/enginenpm
>= 0.8.12, < 0.9.20.9.2

Affected products

2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.