Web3-utils vulnerabilities
We track 1 vulnerability in Web3-utils products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Web3-utils vulnerabilities
- 7.5 High severity
web3-utils: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of th