Description
All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.0.0
References
Could your website be exposed too?
SmartScanner can check your website for set-deep-prop Prototype Pollution and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype pollution vulnerability in 'deep-set - CVE-2020-28276
- Prototype Pollution in record-like-deep-assign - CVE-2021-23402
- Prototype Pollution in cookiex/deep - CVE-2021-23442
- Prototype Pollution in deep-get-set - deep-get-set - CVE-2020-7715
You might also like:
See something that needs correcting? Let us knowUpdated January 27, 2023