← All advisories

High severity8.6NVD Advisory· Published Sep 17, 2021· Updated Jun 17, 2026

CVE-2021-23442

CVE-2021-23442

Description

This affects all versions of package @cookiex/deep. The global proto object can be polluted using the __proto__ object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
@cookiex/deepnpm	< 0.0.7	0.0.7

Affected products

2

@cookiex/deep/@cookiex/deepdescription
ghsa-coords
pkg:npm/%40cookiex/deep
Range: < 0.0.7

Patches

Vulnerability mechanics

References

5

github.com/tony-tsx/cookiex-deep/commit/b5bea2b7f34a5fa9abb4446cbd038ecdbcd09c88nvdPatchThird Party AdvisoryWEB
github.com/tony-tsx/cookiex-deep/issues/1nvdIssue TrackingPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-COOKIEXDEEP-1582793nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-92v9-xh2q-fq9fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23442ghsaADVISORY

News mentions

0

No linked articles in our index yet.