Количество 2
Количество 2
CVE-2019-10745
больше 6 лет назад
assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.
CVSS3: 7.5
EPSS: Низкий
GHSA-66rh-8fw6-59q6
больше 6 лет назад
assign-deep Vulnerable to Prototype Pollution
CVSS3: 7.5
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2019-10745 assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload. | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад | |
GHSA-66rh-8fw6-59q6 assign-deep Vulnerable to Prototype Pollution | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу
20