npm/@zag-js/core CVE-2024-57079: high 7.5, EPSS 0.44%
@zag-js/core prototype pollution
Action: Upgrade @zag-js/core to 0.82.2 or later.
npm i @zag-js/core@0.82.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.82.2 | - |
Fixed versions
| 0.82.2 |
Sources
- osv: GHSA-fg4m-w35q-vfg2
- https://nvd.nist.gov/vuln/detail/CVE-2024-57079
- https://github.com/chakra-ui/zag/pull/2255
- https://github.com/chakra-ui/zag/commit/f53edc548f737aadfdd486a0043bdd5f5c068bbf
- https://gist.github.com/tariqhawis/4778fc57084766b7b7fb6d25d20b7b9b
- https://github.com/chakra-ui/zag
CVE-2024-57079 · published · modified · JSON