GHSA-92v9-xh2q-fq9f
Prototype Pollution in cookiex/deep
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @cookiex/deep | < 0.0.7 | 0.0.7 |
Details
As written in the advisory (Markdown source, shown as plain text).
The npm @cookiex/deep package before version 0.0.7 has a prototype pollution vulnerability. The global proto object can be polluted using the __proto__ object.
References
External links from the advisory. They lead to third-party sites.