Headline
GHSA-47pj-q2vm-46xc: Collection.js vulnerable to Prototype Pollution
Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js.
Collection.js vulnerable to Prototype Pollution
High severity GitHub Reviewed Published Mar 18, 2023 to the GitHub Advisory Database • Updated Mar 20, 2023
Related news
CVE-2023-26113
Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js.