Skip to content
Sign in
Not rated

CVE-2019-10768 In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of…

Description

In AngularJS before 1.7.9 the function `merge()` could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.

Affected products and versions

Product Affected versions Fixed in
AngularJS Versions not published

Other CVEs of AngularJS

The 3 CVEs of AngularJS →
CVE-2024-21490 This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0 7.5 High CVE-2022-25869 All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs… 4.2 Medium
Track this CVE