CVE-2023-26102

7.5HIGH

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify pr

게시됨: 2/24/2023업데이트됨: 3/11/2025
NVD에서 보기MITRE에서 보기

설명

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype

AI 분석AI 기반

영향받는 제품

rangy_projectrangy
-

참조