5 matches found
CVE-2019-10750
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a proto payload...
configly (>=5.0.0, <=5.0.1) potentially affected by CVE-2019-10750 via deeply (3.0.0)
deeply NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: OSV:GHSA-8J4W-5FW4-RM27...
CVE-2019-10750
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a proto payload...
CVE-2019-10750
CVE-2019-10750 relates to the npm package deeply. The vulnerability is a Prototype Pollution issue in versions before 3.1.0, where the function assign-deep can be tricked into adding or modifying properties on Object.prototype via a proto payload. The issue affects the library used to perform dee...
configly (>=5.0.0, <=5.0.1) potentially affected by CVE-2019-10750 via deeply (3.0.0)
deeply NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...