CVSS 3.1
6.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LCVE-2019-10795
Medium (6.3) in undefsafe project undefsafe. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in undefsafe 2.0.3.
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-74
- Published
- Modified
- Record from
- the NVD, synced
Affected
- undefsafe_project:undefsafe
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-332q-7ff2-57h2 | npm | undefsafe | <2.0.3 | 2.0.3 |