EUVD-2022-6215

Malicious code in bioql PyPI...

GHSA-3829-MGMW-JCG4 Prototype Pollution in deep.assign

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

Prototype Pollution in deep.assign

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-40663

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

Code injection

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-40663

CVE-2021-40663 concerns the npm package deep.assign version 0.0.0-alpha.0 , vulnerable to Prototype Pollution due to an improper validation of parameters in the underlying prototype modification mechanism. The issue is documented across multiple sources (NVD entry, Veracode, GHSA, OSV, PRION, CVE...