Lucene search
GoogleOSV:GHSA-XCVV-84J5-JW9HHistoryJul 26, 2018 - 3:12 p.m.
Prototype Pollution in assign-deep
2018-07-2615:12:31
Google
osv.dev
9
0.001 Low
EPSS
Percentile
43.5%
Versions of assign-deep before 0.4.7 are vulnerable to prototype pollution via merging functions.
Recommendation
Update to version 0.4.7 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| assign-deep | lt | 0.4.7 |
Related
nodejs
nodejs
Prototype Pollution
2018-04-24 14:33:06
nvd
nvd
CVE-2018-3720
2018-06-07 02:29:08
veracode
veracode
Prototype Pollution
2018-02-21 02:21:17
cve
cve
CVE-2018-3720
2018-06-07 02:29:08
prion
prion
Authentication flaw
2018-06-07 02:29:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (assign-deep)
2018-01-31 02:46:39
osv
osv
CVE-2018-3720
2018-06-07 02:29:08
cvelist
cvelist
CVE-2018-3720
2018-04-26 00:00:00
github
github
Prototype Pollution in assign-deep
2018-07-26 15:12:31