A vulnerability, which was classified as problematic, was found in carboneio carbone up to fbcd349077ad0e8748be73eab2a82ea92b6f8a7e. This impacts an unknown function of the file lib/input.js of the component Formatter Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes.
This vulnerability is tracked as CVE-2024-14020. The attack can be launched remotely. No exploit exists.
You should upgrade the affected component.
A successful exploitation can “only occur if the parent NodeJS application has the same security issue”.
