description: fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
problem types: Prototype Pollution
affected:
{
product: fun-map
vendor: n/a
versions:
status: affected, version: All versions including 3.3.1
}