CVE-2020-7644
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
CVSS 3.1 · 8.1 High
EPSS 1.2%
KEV · Not listed
Vendors
Products