Prototype Pollution

2022-06-2911:14:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.1%

JSON

underscore.deep is vulnerable to prototype pollution. An attacker is able to pollute any future object creations by passing a crafted malicious payload to deepFromFlat function.

CPENameOperatorVersion
underscore.deeple0.5.2
underscore.deeple0.5.2

CPE	Name	Operator	Version
	underscore.deep	le	0.5.2
	underscore.deep	le	0.5.2

References

github.com/Clever/underscore.deep/commit/b5e109ad05b48371be225fa4d490dd08a94e8ef7

github.com/Clever/underscore.deep/security/advisories/GHSA-8j79-hfj5-f2xm

0.002 Low

EPSS

Percentile

57.1%

JSON

Related for VERACODE:36199