CVE-2021-23442
1 advisory.
npm/@cookiex/deep CVE-2021-23442: high 8.6, EPSS 1.59%
Prototype Pollution in cookiex/deep
Action: Upgrade @cookiex/deep to 0.0.7 or later.
npm i @cookiex/deep@0.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.7 | - |
Fixed versions
| 0.0.7 |
Sources
- osv: GHSA-92v9-xh2q-fq9f
- https://nvd.nist.gov/vuln/detail/CVE-2021-23442
- https://github.com/tony-tsx/cookiex-deep/issues/1
- https://github.com/tony-tsx/cookiex-deep/commit/b5bea2b7f34a5fa9abb4446cbd038ecdbcd09c88
- https://github.com/tony-tsx/cookiex-deep
- https://snyk.io/vuln/SNYK-JS-COOKIEXDEEP-1582793
CVE-2021-23442 · published · modified · JSON