CVE-2021-23417

Critical

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

snyk·CWE-915·Published 2021-07-28

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

97 chars

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

NVDen

97 chars

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

OSV.deven

97 chars

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

GHSAen

97 chars

All versions of package deepmergefn are vulnerable to Prototype Pollution via deepMerge function.

NVDes

125 chars

Todas las versiones del paquete deepmergefn son vulnerables a la contaminación de prototipos a través de la función deepMerge

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H