Security Advisory
CVE-2019-10806
4.3
MEDIUM
Vulnerability Description
vega-util prior to 1.13.1 allows manipulation of object prototype. The 'vega.mergeConfig' method within vega-util could be tricked into adding or modifying properties of the Object.prototype.
Published Date
March 9, 2020
Official Source
NIST NVD Advisory