VYPR
Vendor

Rangy Project

Products
1
CVEs
1
Across products
1
Status
Private

Products

1

Recent CVEs

1
  • CVE-2023-26102HigFeb 24, 2023
    risk 0.49cvss 7.5epss 0.01

    All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype