Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Alykoshin
Products
Mini-deep-assign
CVE-2024-38983

Prototype Pollution in alykoshin mini-deep-assign v0.0.8 allows an attacker to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via the _assign() method at (/lib/index.js:91)

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Alykoshin
Products
Mini-deep-assign