Mockjs vulnerabilities
We track 1 vulnerability in Mockjs products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 8, 2023.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Mockjs vulnerabilities
- 8.2 High severity
mockjs: Improperly Controlled Modification of Object Prototype Attributes
All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute resolves to the object prototype. By adding or modifying attributes of an object prototype, it is possible to create att