Mock.js vulnerabilities

1 known vulnerability in Mock.js from Mockjs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  mockjs: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2023-26158Dec 8, 2023Mockjs

  All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute resolves to the object prototype. By adding or modifying attributes of an object prototype, it is possible to create att