Expand-object vulnerabilities
We track 1 vulnerability in Expand-object products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest Expand-object vulnerabilities
- 7.3 High severity
expand-object: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sen