CVE-2019-10745
20.08.2019, 19:15
assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.
| Vendor | Product | Version |
|---|---|---|
| assign-deep_project | assign-deep | 𝑥 < 0.4.8 |
| assign-deep_project | assign-deep | 1.0.0 |
𝑥
= Vulnerable software versions