CVE-2020-7644

Published April 28th, 2020

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

nathan7/fun-map

a few functional utilities for pretending that JS objects are Clojure string maps.

GitHub