CVE-2024-36578: @akbr/update Prototype Pollution

June 17, 2024

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.

References

gist.github.com/mestrtee/8bc749ec2b5453d887b2f4a362a65897
github.com/advisories/GHSA-mj4p-gmhr-92g3
github.com/akbr/update
nvd.nist.gov/vuln/detail/CVE-2024-36578

Code Behaviors & Features

Detect and mitigate CVE-2024-36578 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →