Skip to content
OpenAdvisories

Package · npm

assign-deep

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-10745

    assign-deep Vulnerable to Prototype Pollution

    assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.

    assign-deep npm
  • High 8.8
    CVE-2018-3720

    Prototype Pollution in assign-deep

    assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that…

    HackerOne assign-deep node module assign-deep npm