high7.3
CVE-2021-23402
All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.
Impact
All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Record-Like-Deep-Assign Project | Record-Like-Deep-Assign | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/kripod/record-like-deep-assign/blob/v1.0.1/src/mod.ts%23L17-L35
- https://snyk.io/vuln/SNYK-JS-RECORDLIKEDEEPASSIGN-1311024
- https://github.com/kripod/record-like-deep-assign/blob/v1.0.1/src/mod.ts%23L17-L35
- https://snyk.io/vuln/SNYK-JS-RECORDLIKEDEEPASSIGN-1311024