VYPR

npm package

jsonic

pkg:npm/jsonic

Vulnerabilities (1)

  • CVE-2024-38993Jul 1, 2024
    affected <= 2.12.1

    rjrodger jsonic-next v2.12.1 was discovered to contain a prototype pollution via the function empty. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.