TI-2019-08010 CVE-2019-10745 · GHSA-66rh-8fw6-59q6
Prototype pollution in assign-deep
Priority LOW 35
assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0.
Vulnerabilities
2 records
TI-2018-02718 CVE-2018-3720 · GHSA-xcvv-84j5-jw9h
Prototype pollution in HackerOne assign-deep node module
Priority MEDIUM 42
assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or mo…