Product:

Assign\-Deep

(Assign\-Deep_project)
Repositories https://github.com/jonschlinkert/assign-deep
#Vulnerabilities 2
Date Id Summary Products Score Patch Annotated
2018-06-07 CVE-2018-3720 assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects. Assign\-Deep 8.8
2019-08-20 CVE-2019-10745 assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload. Assign\-Deep 7.5