← All advisories

High severity7.6NVD Advisory· Published Feb 18, 2022· Updated Jun 17, 2026

CVE-2021-23702

CVE-2021-23702

Description

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
object-extendnpm	<= 0.5.0	—

Affected products

3

object-extend/object-extenddescription
ghsa-coords
pkg:npm/object-extend
Range: <= 0.5.0
Object Extend Project/Object Extend
cpe:2.3:a:object-extend_project:object-extend:*:*:*:*:*:node.js:*:*
Range: <=0.5.0

Patches

Vulnerability mechanics

References

3

snyk.io/vuln/SNYK-JS-OBJECTEXTEND-2401470nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-m639-9whg-fw97ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-23702ghsaADVISORY

News mentions

0

No linked articles in our index yet.