CVE-2023-26158
1 advisory.
npm/mockjs CVE-2023-26158: high 8.2
mockjs vulnerable to Prototype Pollution via the Util.extend function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mh8j-9jvh-gjf6
- https://nvd.nist.gov/vuln/detail/CVE-2023-26158
- https://github.com/nuysoft/Mock
- https://github.com/nuysoft/Mock/blob/00ce04b92eb464e664a4438430903f2de96efb47/dist/mock.js#L721-L755
- https://security.snyk.io/vuln/SNYK-JS-MOCKJS-6051365
CVE-2023-26158 · published · modified · JSON