What is GHSA-92v9-xh2q-fq9f?

GHSA-92v9-xh2q-fq9f is a security advisory published by GitHub Security Advisories with High severity. Prototype Pollution in cookiex/deep

Which CVE IDs does GHSA-92v9-xh2q-fq9f cover?

GHSA-92v9-xh2q-fq9f covers the following CVE IDs: CVE-2021-23442. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-92v9-xh2q-fq9f?

GHSA-92v9-xh2q-fq9f has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

Which products are affected by GHSA-92v9-xh2q-fq9f?

GHSA-92v9-xh2q-fq9f affects 1 product, including: npm/@cookiex/deep:\u003c 0.0.7.

GHSA-92v9-xh2q-fq9fHighCVSS 8.6

Prototype Pollution in cookiex/deep

Vendor

GitHub Security Advisories

Published

September 20, 2021

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2021-23442 →

📋 Description

The npm @cookiex/deep package before version 0.0.7 has a prototype pollution vulnerability. The global proto object can be polluted using the proto object.

🎯 Affected products1

npm/@cookiex/deep:< 0.0.7

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-23442
https://github.com/tony-tsx/cookiex-deep/issues/1
https://github.com/tony-tsx/cookiex-deep/commit/b5bea2b7f34a5fa9abb4446cbd038ecdbcd09c88
https://snyk.io/vuln/SNYK-JS-COOKIEXDEEP-1582793
https://github.com/advisories/GHSA-92v9-xh2q-fq9f