CVE-2021-23663

All versions of package sey are vulnerable to Prototype Pollution via the deepmerge function...

CVE-2021-23663 Prototype Pollution

All versions of package sey are vulnerable to Prototype Pollution via the deepmerge function...

CVE-2021-23663

CVE-2021-23663 affects the JavaScript package sey across all versions, with prototype pollution via deepmerge(). The attackable component is the deepmerge() function, enabling property injection into Object.prototype and potential DoS or remote code execution. The connected sources confirm all ve...