EUVD-2021-1180

Malware in sbrugna...

GHSA-RGFV-V3JH-7FFP Prototype Pollution in deeps

All versions of package deeps up to and including version 1.4.5 are vulnerable to Prototype Pollution via the set function...

CVE-2020-7716

All versions of package deeps are vulnerable to Prototype Pollution via the set function...

Design/Logic Flaw

All versions of package deeps are vulnerable to Prototype Pollution via the set function...

CVE-2020-7716 Prototype Pollution

All versions of package deeps are vulnerable to Prototype Pollution via the set function...

Prototype Pollution

Overview deeps is a Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc. Affected versions of this package are vulnerable to Prototype Pollution via the set function. POC: const deeps = require'deeps'; deeps.set, 'proto.polluted', true;...