deeps@1.3.1 vulnerabilities

Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc.

1.4.5

8 years ago

6 years ago

Known vulnerabilities in the deeps package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Prototype Pollution deeps is a Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc. Affected versions of this package are vulnerable to Prototype Pollution via the `set` function. POC: `const deeps = require('deeps'); deeps.set({}, '__proto__.polluted', true); console.log(polluted);` How to fix Prototype Pollution? There is no fixed version for `deeps`.	*

deeps is a Highly performant utilities to manage deeply nested objects. get, set, merge, flatten, diff etc.

Affected versions of this package are vulnerable to Prototype Pollution via the set function.

const deeps = require('deeps');
deeps.set({}, '__proto__.polluted', true);
console.log(polluted);

How to fix Prototype Pollution?

There is no fixed version for deeps.