6 matches found
object-deep-assign Prototype Pollution
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
CVE-2024-36582
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
CVE-2024-36582
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
object-deep-assign Prototype Pollution
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...
CVE-2024-36582
The @alexbinary/object-deep-assign library (version 1.0.11 ) is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (located in /src/index.js). This vulnerability occurs because the function lacks proper prototype checks, allowing attackers to copy malicious properties ...
