Description
Prototype pollution vulnerability in ‘deep-override’ versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.
Recommendation
Update the deep-override package to the latest compatible version. Followings are version details:
- Affected version(s): >= 1.0.0, < 1.0.2
- Patched version(s): 1.0.2
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in deep-override and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution in cookiex/deep - CVE-2021-23442
- deep-defaults vulnerable to prototype pollution - CVE-2021-25944
- set-deep-prop Prototype Pollution - CVE-2021-23373
- Prototype Pollution in record-like-deep-assign - CVE-2021-23402
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023