npm/record-like-deep-assign CVE-2021-23402: high 7.3, EPSS 1.17%
Prototype Pollution in record-like-deep-assign
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7qm6-9v49-38m9
- https://nvd.nist.gov/vuln/detail/CVE-2021-23402
- https://github.com/kripod/record-like-deep-assign
- https://github.com/kripod/record-like-deep-assign/blob/v1.0.1/src/mod.ts%23L17-L35
- https://snyk.io/vuln/SNYK-JS-RECORDLIKEDEEPASSIGN-1311024
CVE-2021-23402 · published · modified · JSON