deap@0.2.0 vulnerabilities

extend and merge objects, deep or shallow

  • latest version

    1.0.1

  • latest non vulnerable version

  • first published

    11 years ago

  • latest version published

    6 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the deap package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Prototype Pollution

    deap is a library for extending and merging objects, deep or shallow, in javascript

    Affected versions of this package are vulnerable to Prototype Pollution. The utilities function. It can be tricked into modify the prototype of "Object" when the attacker control part of the structure passed to these function. This can let an attacker add or modify existing property that will exist on all object.

    How to fix Prototype Pollution?

    Upgrade deap to version 1.0.1 or higher.

    <1.0.1