Skip to content
OpenAdvisories

Package · npm

nested-object-assign

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2021-23329

    Prototype Pollution

    The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.

    nested-object-assign npm