CVE-2024-57085

Summary

CVE-2024-57085 is a prototype pollution vulnerability affecting the deepMerge function in the @stryker-mutator/util library, version 8.6.0. This issue permits attackers to supply a maliciously crafted payload, leading to a Denial of Service (DoS) condition in the targeted system. By manipulating the function's handling of merged objects, an attacker can cause unintended behavior or exhaust system resources, resulting in a disruption of services. Users are advised to upgrade to a patched version of the library to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.