Description
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | defaults-deep | <=0.2.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | defaults-deep | <= 0.2.4 | — | GHSA-pjxw-22xf-6pwc |