Lucene search
GoogleOSV:GHSA-8J4W-5FW4-RM27HistoryAug 27, 2019 - 5:45 p.m.
Prototype Pollution in deeply
2019-08-2717:45:33
Google
osv.dev
3
0.007 Low
EPSS
Percentile
79.7%
Versions of deeply prior to 1.0.1 are vulnerable to Prototype Pollution. The package fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.
Recommendation
Upgrade to version 3.1.0 or later.
Related
nodejs
nodejs
Prototype Pollution
2019-06-28 20:09:30
veracode
veracode
Prototype Pollution
2019-07-01 07:56:02
cvelist
cvelist
CVE-2019-10750
2019-08-23 16:50:36
nvd
nvd
CVE-2019-10750
2019-08-23 17:15:13
cve
cve
CVE-2019-10750
2019-08-23 17:15:13
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Deeply Project Deeply
2020-12-01 09:18:57
prion
prion
Design/Logic Flaw
2019-08-23 17:15:00
github
github
Prototype Pollution in deeply
2019-08-27 17:45:33