CVE-2021-40663

Description

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

Affected Platforms

Weakness Type

CWE-1321

References

• https://github.com/janbialostok/deep-assign/issues/1
• https://security.netapp.com/advisory/ntap-20220826-0002/
• https://www.npmjs.com/package/deep.assign
• https://github.com/janbialostok/deep-assign/issues/1
• https://security.netapp.com/advisory/ntap-20220826-0002/
• https://www.npmjs.com/package/deep.assign