Versions of the package expand-object from 0.0.0 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sensitive properties like __proto__.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| expand-object(npm) | 0 | N/A | N/A |
CVSS Metrics
