Description
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @alexbinary/object-deep-assign | <= 1.0.11 | — | GHSA-4xg3-7w7q-856q |