{"id":"CVE-2019-10795","aliases":["GHSA-332q-7ff2-57h2","SNYK-JS-UNDEFSAFE-548940"],"url":"https://o3.security/vulnerability/CVE-2019-10795","summary":"Prototype Pollution in undefsafe","details":"undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.","published":"2020-02-18T16:15:10.470Z","modified":"2026-07-09T00:37:22.668196Z","cvss":{"score":6.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"npm","name":"undefsafe","fixedVersion":"2.0.3"}],"fix":{"url":"https://github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822","label":"remy/undefsafe@f272681"},"references":[{"type":"FIX","url":"https://github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822"},{"type":"EVIDENCE","url":"https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T00:37:22.668196Z"}}