Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
tsparticles/tsparticles
heads/main @ c4c38dc
2
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Prototype Pollution: 2 prior fixes. Scrutinize any change in this area.
components/react-particles-js/src/lib/Utils.ts: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Prototype Pollution: The deepExtend utility was vulnerable to Prototype Pollution because it recursively copied properties without filtering out dangerous keys, potentially allowing attackers to alter the global Object prototype via application configurations.
Prototype Pollution: The deepAssign utility in the React component lacked protection against prototype modification, making it vulnerable when processing untrusted configuration objects.