4 matches found
CVE-2024-36582
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
9.8CVSS0.00558EPSS
SaveExploits0References1
CVE-2024-36582
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
7.1AI score0.00558EPSS
SaveExploits0References1
CVE-2024-36582
The CVE-2024-36582 entry affects alexbinary object-deep-assign version 1.0.11 and is caused by a lack of prototype checks in extend within Module.deepAssign (/src/index.js), enabling Prototype Pollution via special properties (e.g., proto ). Multiple sources (Veracode, GitHub advisory GHSA-4XG3-7...
9.8CVSS6.5AI score0.00558EPSS
SaveExploits0References1
20