Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-23413
5.3
MEDIUMCVSS v3
Severity scale
010
Description
This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.
jszip
NPMCreate, read and edit .zip files with JavaScript http://stuartk.com/jszip
NPMCreate, read and edit .zip files with JavaScript http://stuartk.com/jszip< 3.7.0, >= 3.0.0, < 3.7.0, < 2.7.0NVD
@types/jszipNPMStub TypeScript definitions entry for jszip, which provides its own types definitions
NPMStub TypeScript definitions entry for jszip, which provides its own types definitions< 3.7.0, >= 3.0.0, < 3.7.0, < 2.7.0NVD
Stuk/jszip
GitHub
