Description (CNA)
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / nested-object-assign | affected unspecified before 1.0.4 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JS-NESTEDOBJECTASSIGN-1065977
- https://github.com/Geta/NestedObjectAssign/pull/11
ADP enrichment
No English description supplied.