Threats tagged 'ghsa-7g65-3hpp-6gg5'

Sveltejs devalue versions before 5.6.3 contain a prototype pollution vulnerability. This flaw allows attackers to manipulate object prototypes by providing untrusted data to the uneval function. When the affected code evaluates this data, it results in objects with polluted prototypes, causing output data to differ in structure from the original input. The vulnerability has a medium severity rating with a CVSS score of 4.4.