GitHub Advisoryadvisory · npm

GHSA-c497-v8pv-ch6x Prototype pollution in nested-object-assign

HIGH Published 2021-02-01 Modified 2023-08-08 Official page ↗

Aliases: CVE-2021-23329
Ecosystem: npm
Packages: nested-object-assign
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-400
Reviewed: 2021-02-01

Affected packages

• npm nested-object-assign: < 1.0.4 → fixed in 1.0.4

Description

The package nested-object-assign before 1.0.4 is vulnerable to Prototype Pollution via the default function.

Related

Alias · CVE (1)

CVE-2021-23329 The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running… vulnerability

Weakness · CWE (1)

CWE-400 Uncontrolled Resource Consumption weakness

References