CVE-2020-7616

Name of the Vulnerable Software and Affected Versions express-mock-middleware versions 0.0.0 through 0.0.6

Description The issue allows exported functions by the package to be tricked into adding or modifying properties of the Object.prototype, which can be exploited by creating a new directory with attack code that will be exported by express-mock-middleware. This is considered a low-risk issue.

Recommendations For express-mock-middleware versions 0.0.0 through 0.0.6, consider updating to a version that fixes the Prototype Pollution issue, as the current version can be exploited by manipulating the Object.prototype.