Skip to content
OpenAdvisories

Package · npm

@alexbinary/object-deep-assign

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-36582

    object-deep-assign Prototype Pollution

    alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)

    @alexbinary/object-deep-assign npm