VYPR

Assign Deep

by Assign Deep Project

CVEs (1)

  • CVE-2019-10745HigAug 20, 2019
    risk 0.42cvss 7.5epss 0.01

    assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.