alexbinary/object-deep-assign · Security
object-deep-assign Prototype Pollution
- GHSA ID
- GHSA-4xg3-7w7q-856q
- CVE ID
- CVE-2024-36582
- Severity
- medium
- Published
- Updated
Description
alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)