Assign Deep

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2018-3720	Assign Deep Project Assign Deep	Hig	0.50	8.8	0.02		Jun 7, 2018	assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all…
CVE-2019-10745	Assign Deep Project Assign Deep	Hig	0.42	7.5	0.01		Aug 20, 2019	assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.

CVE-2018-3720HigJun 7, 2018
Assign Deep Project
Assign Deep
risk 0.50cvss 8.8epss 0.02
assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all…
CVE-2019-10745HigAug 20, 2019
Assign Deep Project
Assign Deep
risk 0.42cvss 7.5epss 0.01
assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.