CVE-2021-23402
All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - report@snyk.io
- Published
- 2021-07-02
- Last modified
- 2024-09-16
- Weaknesses
- CWE-1321
Affected products
References
- https://github.com/kripod/record-like-deep-assign/blob/v1.0.1/src/mod.ts%23L17-L35
- https://snyk.io/vuln/SNYK-JS-RECORDLIKEDEEPASSIGN-1311024
