CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

CVE-2024-36582

The alexbinary object-deep-assign library (version 1.0.11 ) is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign in /src/index.js. The root cause is a lack of prototype checks, allowing attackers to copy malicious properties to the built-in Object.prototype using spec...