CVE-2022-41713
1 advisory.
npm/deep-object-diff CVE-2022-41713: medium 5.3
deep-object-diff vulnerable to Prototype Pollution
Action: Upgrade deep-object-diff to 1.1.9 or later.
npm i deep-object-diff@1.1.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.6 | 1.1.9 | - |
Fixed versions
| 1.1.9 |
Sources
- osv: GHSA-653v-rqx9-j85p
- https://nvd.nist.gov/vuln/detail/CVE-2022-41713
- https://github.com/mattphillips/deep-object-diff/issues/85
- https://github.com/mattphillips/deep-object-diff/issues/85#issuecomment-1312450353
- https://github.com/mattphillips/deep-object-diff/pull/87/commits/55f9c3c70cf0d54cb30291e949fb8682fa3c5d9f
- https://github.com/mattphillips/deep-object-diff/pull/87/commits/9576963b68b955e88610aa4f0c696a1aafc1119d
- https://fluidattacks.com/advisories/heldens
- https://github.com/mattphillips/deep-object-diff
CVE-2022-41713 · published · modified · JSON