GHSA-x7q7-fchv-8h2j
@ranfdev/deepobj has a Prototype Pollution vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @ranfdev/deepobj | < 1.0.3 | 1.0.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Prototype pollution is possible when property paths contain `__proto__`/`constructor`/`prototype`. The property path must not be exposed as user input.
References
External links from the advisory. They lead to third-party sites.