high7.5
CVE-2021-23329
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.
Impact
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getadigital | Nested-Object-Assign | before 1.0.4 |