npm/deep.assign CVE-2021-40663: critical 9.8, EPSS 1.79%
Prototype Pollution in deep.assign
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3829-mgmw-jcg4
- https://nvd.nist.gov/vuln/detail/CVE-2021-40663
- https://github.com/janbialostok/deep-assign/issues/1
- https://github.com/janbialostok/deep-assign
- https://security.netapp.com/advisory/ntap-20220826-0002
- https://www.npmjs.com/package/deep.assign
CVE-2021-40663 · published · modified · JSON