CVE-2024-38988
CVE-2024-38988
This page contains facts from public vulnerability sources. Check the original advisory before updating.
alizeait unflatto <= 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
CVSS 9.8 · Critical · EPSS 0.9% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
@alizeait/unflatto npm
- Affected ranges
- SEMVER: < 1.0.3
Update to 1.0.3