CVE-2024-57079

Summary

CVE-2024-57079 is a prototype pollution vulnerability affecting the lib.deepMerge function in the @zag-js/core library version 0.50.0. Malicious input can be used to cause a Denial of Service (DoS) issue by manipulating the prototype chain in an unexpected way. This flaw poses a risk for applications that use this library and could potentially be exploited by attackers to disrupt services. To mitigate this issue, it is recommended to update to the latest version of @zag-js/core that addresses this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.