Rangy vulnerabilities
We track 1 vulnerability in Rangy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 24, 2023.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Rangy vulnerabilities
- 8.2 High severity
rangy: Improperly Controlled Modification of Object Prototype Attributes
All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype