Lucene search
+L
Cookiex-deep ProjectCookiex-deep

1 matches found

CVE
CVE
added 2021/09/17 9:45 a.m.63 views

CVE-2021-23442

The CVE-2021-23442 issue affects the npm package @cookiex/deep, where the global Object proto can be polluted via proto . The root cause is prototype pollution in the library, impacting all versions prior to 0.0.7. Documented references (GHSA, OSV, Veracode, NVD) indicate high impact with potenti...

9.8CVSS9.2AI score0.0159EPSS
Save