← All advisories

High severity7.3NVD Advisory· Published Jul 2, 2021· Updated Jun 17, 2026

CVE-2021-23402

CVE-2021-23402

Description

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
record-like-deep-assignnpm	<= 1.0.1	—

Affected products

3

record-like-deep-assign/record-like-deep-assigndescription
ghsa-coords
pkg:npm/record-like-deep-assign
Range: <= 1.0.1
Record Like Deep Assign Project/Record Like Deep Assign
cpe:2.3:a:record-like-deep-assign_project:record-like-deep-assign:*:*:*:*:*:node.js:*:*

Patches

Vulnerability mechanics

References

4

snyk.io/vuln/SNYK-JS-RECORDLIKEDEEPASSIGN-1311024nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-7qm6-9v49-38m9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23402ghsaADVISORY
github.com/kripod/record-like-deep-assign/blob/v1.0.1/src/mod.ts%23L17-L35nvdBroken LinkWEB

News mentions

0

No linked articles in our index yet.