ROOT-APP-NPM-CVE-2021-23329 CVE-2021-23329 in nested-object-assign - Patched by Root

Root has patched CVE-2021-23329 in the nested-object-assign package for Root:npm. Multiple fixed versions available...

CVE-2021-23329

The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below...

CVE-2021-23329 Prototype Pollution

The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below...

CVE-2021-23329

CVE-2021-23329 affects the npm package nested-object-assign, specifically versions prior to 1.0.4. The vulnerability is Prototype Pollution via the default function, allowing an attacker to inject properties into Object.prototype. Exploitation details are not provided in the provided documents, b...