~ / search / GHSA-85cp-p426-42f5

GHSA-85cp-p426-42f5

Prototype Pollution in deep-get-set

Source: GitHub Advisory Database (reviewed) High CVE-2020-7715

Packages

EcosystemPackageAffectedFixed in
npm deep-get-set < 1.1.1 1.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package deep-get-set prior to version 1.1.1 are vulnerable to Prototype Pollution via the main function.

References

External links from the advisory. They lead to third-party sites.