Description
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-DEEPLY-451026
Related Vulnerabilities
CVE-2014-3603 Vulnerability in maven package org.opensaml:opensaml
CVE-2022-31170 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2018-18628 Vulnerability in maven package ro.pippo:pippo-core
CVE-2010-3863 Vulnerability in maven package org.jsecurity:jsecurity
CVE-2020-7637 Vulnerability in npm package class-transformer