web3-utils vulnerabilities

1 known vulnerability in web3-utils from Web3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  web3-utils: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-21505Mar 25, 2024Web3-utils

  Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of th