Skip to content
OpenAdvisories
High · 8.6 CVE-2021-23442 EUVD-2021-2020GHSA-92v9-xh2q-fq9fSNYK-JS-COOKIEXDEEP-1582793

Prototype Pollution

Published Sep 17, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the __proto__ object.

Affected products

VendorProductAffectedFixed
— @cookiex/deep < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm @cookiex/deep < 0.0.7 0.0.7 GHSA-92v9-xh2q-fq9f

References