Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-3B2959CEC7D258DA7A3057774B96F515

HistoryJun 17, 2024 - 12:00 a.m.

object-deep-assign Prototype Pollution

2024-06-1700:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

alexbinary

object-deep-assign

vulnerability

prototype pollution

extend()

module.deepassign

software

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)

Affected configurations

Vulners

Node

npmobject-deep-assignRange≤1.0.11

CPENameOperatorVersion
npm/@alexbinary/object-deep-assignle1.0.11

CPE	Name	Operator	Version
	npm/@alexbinary/object-deep-assign	le	1.0.11

gist.github.com/mestrtee/9fe4d3a862c62ce6b2b0d20d4c5fd346

github.com/advisories/GHSA-4xg3-7w7q-856q

github.com/alexbinary/object-deep-assign

nvd.nist.gov/vuln/detail/CVE-2024-36582