jonschlinkert/kind-of
GitHub
Releases23
Frequency2 months 3 weeks
Last Release
Stars355
Get the native JavaScript type of a value, fast. Used by superstruct, micromatch and many others!
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.5 HIGH | 5 MEDIUM | ||
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result. | |||