This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL-608878).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2022-03-17T11:20:35.048563Z

Updated: 2024-09-17T00:20:38.770Z

Reserved: 2021-01-08T00:00:00

Link: CVE-2021-23771

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-17T12:15:07.740

Modified: 2024-11-21T05:51:53.017

Link: CVE-2021-23771

cve-icon Redhat

No data.