CVE-2024-38991

npm/@akbr/patch-into CVE-2024-38991: high 8.8, EPSS 0.82%

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-gh4x-qv3p-m9pm
• https://nvd.nist.gov/vuln/detail/CVE-2024-38991
• https://gist.github.com/mestrtee/8851413e3b33a96f191f0e9c81706532

CVE-2024-38991 · published 2024-07-01T15:32:11Z · modified 2024-07-05T17:41:35Z · JSON