GHSA-4mvj-rq4v-2fxwHighCVSS 8.6

Prototype Pollution in x-assign

Published
October 21, 2021
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-23452 →

📋 Description

This vulnerability affects all versions of package x-assign. The global proto object can be polluted using the proto object.

🎯 Affected products1

  • npm/x-assign:<= 0.1.4

🔗 References (4)