CVE-2021-23568.md

CVE-2021-23568

Description

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-EXTEND2-2320315

Github

No PoCs found on GitHub currently.