Vulnerability CVE-2021-40663
Published: 2022-06-30

Description:
deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

 References:
https://github.com/janbialostok/deep-assign/issues/1
https://www.npmjs.com/package/deep.assign
Copyright 2026, cxsecurity.com

 

Back to Top