CVE-2023-26113

Published March 18th, 2023

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js.

kobezzza/Collection

Minimalistic JavaScript library for working with collections of data.

GitHub