critical9.8
CVE-2019-10750
deeply is vulnerable to Prototype Pollution in versions before 3.1.0.
Impact
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Deeply Project | Deeply | before 3.1.0 |