CVE-2024-36582
1 advisory.
npm/@alexbinary/object-deep-assign CVE-2024-36582: medium, EPSS 0.56%
object-deep-assign Prototype Pollution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.11 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4xg3-7w7q-856q
- https://nvd.nist.gov/vuln/detail/CVE-2024-36582
- https://gist.github.com/mestrtee/9fe4d3a862c62ce6b2b0d20d4c5fd346
- https://github.com/alexbinary/object-deep-assign
CVE-2024-36582 · published · modified · JSON