Prototype Pollution Vulnerability Affecting @jsonic/jsonic-next module, versions *

[tariqhawis]

Overview

A Prototype Pollution vulnerability Affecting @jsonic/jsonic-next, due to missing check if the argument resolves to the object prototype. This allow the attacker to inject malicious object property using the built-in Object property __proto__ which recursively assigned to all the objects in the program.

Details sent directly to the maintainer