CVE-2024-38987: Ageoflearning CLI-Lib

Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days.

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Affected products

• Ageoflearning CLI-Lib: version 3.14.0 only

Published 2024-07-01. Last modified 2026-06-17.