GitHub Advisoryadvisory · npm

GHSA-4xg3-7w7q-856q object-deep-assign Prototype Pollution

MEDIUM Published 2024-06-17 Modified 2024-06-17 Official page ↗
Aliases
CVE-2024-36582
Ecosystem
npm
Packages
@alexbinary/object-deep-assign
Severity
Moderate
Reviewed
2024-06-17

Affected packages

• npm @alexbinary/object-deep-assign: <= 1.0.11 (no fix yet)

Description

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)

Related

Alias · CVE (1)

  • CVE-2024-36582 alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js) vulnerability

References