npm/deep-parse-json CVE-2022-42743: medium 5.3, EPSS 0.67%

deep-parse-json vulnerable to Prototype Pollution

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-ff9j-pwxg-q5p2
• https://nvd.nist.gov/vuln/detail/CVE-2022-42743
• https://github.com/sibu-github/deep-parse-json/issues/6
• https://fluidattacks.com/advisories/buuren
• https://github.com/sibu-github/deep-parse-json

CVE-2022-42743 · published 2022-11-04T12:00:25Z · modified 2023-11-08T04:10:40.191998Z · JSON