akbr @akbr/patch-into vulnerabilities

Latest akbr @akbr/patch-into CVEs

Newest publication first

1. CVE-2024-38991 akbr patch-into was discovered to contain a prototype pollution via the function patchInto

   Published 2024-07-01

   High·CVSS 8.8

   akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.