Prototype Pollution

underscore.deep is vulnerable to prototype pollution. An attacker is able to pollute any future object creations by passing a crafted malicious payload to deepFromFlat function...

CVE-2022-31106

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of underscore.deep prior to version 0.5.3 are vulnerable to a prototype pollution vulnerability. An attacker can craft a malicious payload and pass it to deepFromFlat, which would pollute any future...

CVE-2022-31106

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of "underscore.deep" prior to version 0.5.3 are vulnerable to a prototype pollution vulnerability. An attacker can craft a malicious payload and pass it to "deepFromFlat", which would pollute any future...

CVE-2022-31106 Prototype Pollution in underscore.deep

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of underscore.deep prior to version 0.5.3 are vulnerable to a prototype pollution vulnerability. An attacker can craft a malicious payload and pass it to deepFromFlat, which would pollute any future...

CVE-2022-31106 Prototype Pollution in underscore.deep

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of underscore.deep prior to version 0.5.3 are vulnerable to a prototype pollution vulnerability. An attacker can craft a malicious payload and pass it to deepFromFlat, which would pollute any future...

PT-2022-20532

Name of the Vulnerable Software and Affected Versions underscore.deep versions prior to 0.5.3 Description The issue affects a collection of Underscore mixins that operate on nested objects, allowing an attacker to craft a malicious payload and pass it to deepFromFlat, which would pollute any futu...

PT-2022-15447

Name of the Vulnerable Software and Affected Versions underscore.deep versions prior to 0.5.3 Description The issue is related to Prototype Pollution in the GitHub repository clever/underscore.deep. Recommendations For versions prior to 0.5.3, update to version 0.5.3 or later to resolve the issue...

CVE-2022-31106: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of underscore.deep prior to version 0.5.3 are vulnerable to a prototype pollution vulnerability. An attacker can craft a malicious payload and pass it to deepFromFlat, which would pollute any future...