Описание
Prototype pollution in nested-object-assign
The package nested-object-assign before 1.0.4 is vulnerable to Prototype Pollution via the default function.
Пакеты
Наименование
nested-object-assign
npm
Затронутые версииВерсия исправления
< 1.0.4
1.0.4
Связанные уязвимости
CVSS3: 7.5
nvd
около 5 лет назад
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.