{"id":793912,"name":"@akbr/patch-into","ecosystem":"npm","description":"Immutably patch JS objects.","homepage":"https://github.com/akbr/patch-into#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/akbr/patch-into","keywords_array":["immutable","object","copy"],"namespace":"akbr","versions_count":2,"first_release_published_at":"2016-09-02T13:39:03.258Z","latest_release_published_at":"2016-09-02T16:29:54.696Z","latest_release_number":"1.0.1","last_synced_at":"2026-04-07T10:10:59.712Z","created_at":"2022-04-07T13:11:18.878Z","updated_at":"2026-04-07T10:10:59.713Z","registry_url":"https://www.npmjs.com/package/@akbr/patch-into","install_command":"npm install @akbr/patch-into","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.0.1"}},"repo_metadata":{},"repo_metadata_updated_at":"2026-03-22T10:58:37.322Z","dependent_packages_count":2,"downloads":31,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":33.83479872121827,"dependent_repos_count":10.340532343810322,"dependent_packages_count":20.981644393120014,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":21.718991819382868},"purl":"pkg:npm/%40akbr/patch-into","advisories":[{"uuid":"GSA_kwCzR0hTQS1naDR4LXF2M3AtbTlwbc4AA9bq","url":"https://github.com/advisories/GHSA-gh4x-qv3p-m9pm","title":"akbr patch-into was discovered to contain a prototype pollution via the function patchInto","description":"akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-07-01T15:32:11.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-38991","https://gist.github.com/mestrtee/8851413e3b33a96f191f0e9c81706532","https://github.com/advisories/GHSA-gh4x-qv3p-m9pm"],"source_kind":"github","identifiers":["GHSA-gh4x-qv3p-m9pm","CVE-2024-38991"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-07-01T22:05:21.151Z","updated_at":"2026-04-05T20:04:48.416Z","epss_percentage":0.00283,"epss_percentile":0.51532,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1naDR4LXF2M3AtbTlwbc4AA9bq","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1naDR4LXF2M3AtbTlwbc4AA9bq","packages":[{"ecosystem":"npm","package_name":"@akbr/patch-into","versions":[{"first_patched_version":null,"vulnerable_version_range":"= 1.0.1"}],"purl":"pkg:npm/%40akbr%2Fpatch-into"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1naDR4LXF2M3AtbTlwbc4AA9bq/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@akbr/patch-into","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@akbr/patch-into","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@akbr/patch-into/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@akbr%2Fpatch-into/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@akbr%2Fpatch-into/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@akbr%2Fpatch-into/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@akbr%2Fpatch-into/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@akbr%2Fpatch-into/codemeta","maintainers":[{"uuid":"akbr","login":"akbr","name":null,"email":"akbr@akbr.net","url":null,"packages_count":10,"html_url":"https://www.npmjs.com/~akbr","role":null,"created_at":"2022-11-08T17:11:27.744Z","updated_at":"2022-11-08T17:11:27.744Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/akbr/packages"}]}