Read the docs

Assign-deep Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Assign-deep Project records in CISA KEV

No Assign-deep Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Assign-deep 2 records MEDIUM

Records

2 records

TI-2018-02718 CVE-2018-3720 · GHSA-xcvv-84j5-jw9h

Prototype pollution in HackerOne assign-deep node module

Priority MEDIUM 42

assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or mo…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01988 Published 2018-06-07 Fixed in 0.4.7 CWE-471
TI-2019-08010 CVE-2019-10745 · GHSA-66rh-8fw6-59q6

Prototype pollution in assign-deep

Priority LOW 35

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01142 Published 2019-08-20 Fixed in 0.4.8, 1.0.1 CWE-1321
Open these records in search →