~ / search / GHSA-4mvj-rq4v-2fxw

GHSA-4mvj-rq4v-2fxw

Prototype Pollution in x-assign

Source: GitHub Advisory Database (reviewed) High CVE-2021-23452

Packages

EcosystemPackageAffectedFixed in
npm x-assign <= 0.1.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This vulnerability affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.

References

External links from the advisory. They lead to third-party sites.