-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| bun | npm | < 1.1.30 | 1.1.30 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from using getOwn/getOwnTruthy methods that checked the prototype chain. The commit replaced them with get/getTruthy using a mitigation that stops at Object.prototype. Affected functions are those processing user-input objects via these methods before the fix. High confidence due to explicit security-focused code changes in the commit diff across multiple API endpoints.