mol-proto is a ES5-compatible object manipulation library for node and modern browsers.
Affected versions of the package are vulnerable to Arbitrary Code Injection due to unsafe use of the
eval() function. Node.js provides the
mol-proto to version 1.0.6 or higher.
- Cristian-Alexandru Staicu, Michael Pradel, Ben Livshits
- Snyk ID
- 07 Apr, 2016
- 08 Apr, 2018