underscore.deep@0.3.0 vulnerabilities

Underscore mixins for deeply nested objects

Direct Vulnerabilities

Known vulnerabilities in the underscore.deep package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Prototype Pollution

underscore.deep is an Underscore mixins for deeply nested objects

Affected versions of this package are vulnerable to Prototype Pollution when passing a malicious payload through a deepFromFlat object.

How to fix Prototype Pollution?

Upgrade underscore.deep to version 0.5.3 or higher.

<0.5.3