critical9.8
CVE-2021-23702
Prototype Pollution in object-extend
Impact
The package object-extend from 0.0.0 through 0.5.0 is vulnerable to Prototype Pollution via object-extend.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | object-extend | <= 0.5.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Object-Extend Project | Object-Extend | through 0.5.0 |