Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-25941 EUVD-2021-1197GHSA-v659-54cx-g4qr

Prototype Pollution in deep-override

Published May 14, 2021 · Updated Apr 30, 2025 · Assigned by Mend

Description

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— deep-override 1.0.0, 1.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm deep-override >= 1.0.0, < 1.0.2 1.0.2 GHSA-v659-54cx-g4qr

References