CVE-2019-10795

Name of the Vulnerable Software and Affected Versions undefsafe versions prior to 2.0.3

Description The issue allows the a function to be tricked into adding or modifying properties of Object.prototype using a proto payload, which is a type of Prototype Pollution. This occurs because the function is not properly protected against such payloads.

Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the a function until a patch is available.