Lucene search
+L
GetadigitalNested-object-assign

1 matches found

CVE
CVE
added 2021/01/31 3:25 p.m.75 views

CVE-2021-23329

CVE-2021-23329 affects the npm package nested-object-assign, specifically versions prior to 1.0.4. The vulnerability is Prototype Pollution via the default function, allowing an attacker to inject properties into Object.prototype. Exploitation details are not provided in the provided documents, b...

7.5CVSS7.4AI score0.0152EPSS
Save