VYPR

Class Transformer

by Class Transformer Project

CVEs (1)

  • CVE-2020-7637MedApr 6, 2020
    risk 0.28cvss 5.3epss 0.01

    class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.