CVE-2024-38990

Published: 2024-07-01T13:15Z

Last Modified: 2024-11-21T09:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt