EUVD-2021-2473

Malware in sbrugna...

Prototype Pollution in record-like-deep-assign

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality. PoC js const deepAssign = require'record-like-deep-assign'; let obj = ; console.log"Before being polluted: " + obj.polluted; EVILJSON = JSON.parse'"proto":"polluted":true'; deepAssign...

GHSA-7QM6-9V49-38M9 Prototype Pollution in record-like-deep-assign

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality. PoC js const deepAssign = require'record-like-deep-assign'; let obj = ; console.log"Before being polluted: " + obj.polluted; EVILJSON = JSON.parse'"proto":"polluted":true'; deepAssign...

record-like-deep-assign code issue vulnerability

record-like-deep-assign is a package. A code issue vulnerability exists in record-like-deep-assign that stems from a prototype contamination affecting key functionality within the plugin. No details of the vulnerability are provided at this time...

CVE-2021-23402

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

Design/Logic Flaw

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23402

CVE-2021-23402 affects the npm package record-like-deep-assign. All versions are vulnerable to prototype pollution via the main functionality, as shown in public advisories. The root cause involves unsafe handling of object merges or path-based assignments that can pollute Object.prototype, enabl...

CVE-2021-23402

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23402

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

PT-2021-15493

Name of the Vulnerable Software and Affected Versions record-like-deep-assign versions all Description The issue affects the main functionality of the package, allowing for Prototype Pollution. This occurs when an attacker can inject properties into an object's prototype, potentially leading to...

CVE-2021-23402: Improperly Controlled Modification of Object Prototype Attributes

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

record-like-deep-assign 代码问题漏洞

record-like-deep-assign is a package. A code issue vulnerability exists in record-like-deep-assign that stems from a prototype contamination affecting key functionality within the plugin. No details of the vulnerability are provided at this time...