alexbinary vulnerabilities

Products

• @alexbinary/object-deep-assign 1

Latest alexbinary CVEs

Newest publication first

1. CVE-2024-36582 object-deep-assign Prototype Pollution

   Published 2024-06-17

   Critical·CVSS 9.8 EPSS 0.56%

   alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js)

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.