7.5
Élevée
CVE-2023-26102 All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file…
Description
All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| rangy | Versions non publiées |