CVE-2019-10795

Published February 18th, 2020

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

remy/undefsafe

Simple *function* for retrieving deep object properties without getting "Cannot read property 'X' of undefined"

GitHub