CVE-2019-10750

deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a proto payload...

configly (>=5.0.0, <=5.0.1) potentially affected by CVE-2019-10750 via deeply (3.0.0)

deeply NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: OSV:GHSA-8J4W-5FW4-RM27...

CVE-2019-10750

deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a proto payload...

@amishurinskiy/router (1.0.0), @bluedrop_dev/configly (4.0.2) +36 more potentially affected by CVE-2019-10750 via deeply (>=0.1.0, <=3.0.0)

deeply NPM version =0.1.0, =1.0.0-rc1, =1.1.1, =1.0.0, =0.2.1, =3.0.0, =1.0.0, =1.0.0, =2.0.0 - fabspa-js 0.5.0 and more Source cves: CVE-2019-10750 Source advisory: MEND:CVE-2019-10750...

CVE-2019-10750

CVE-2019-10750 relates to the npm package deeply. The vulnerability is a Prototype Pollution issue in versions before 3.1.0, where the function assign-deep can be tricked into adding or modifying properties on Object.prototype via a proto payload. The issue affects the library used to perform dee...

configly (>=5.0.0, <=5.0.1) potentially affected by CVE-2019-10750 via deeply (3.0.0)

deeply NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on deeply and may be impacted: - configly =5.0.0, =5.0.1 Source cves: CVE-2019-10750 Source advisory: SNYK:JS-DEEPLY-451026...