Skip to content
OpenAdvisories

Package · npm

smart-extend

1 known vulnerabilities.

1 result · Feed

  • Medium —

    Prototype Pollution in smart-extend

    All versions of `smart-extend` are vulnerable to Prototype Pollution. The `deep()` function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. ## Recommendation No fi…