Description

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.

Remediation

References

https://snyk.io/vuln/SNYK-JS-NODEEUTILS-598679

Related Vulnerabilities

CVE-2021-23771 Vulnerability in npm package argencoders-notevil

CVE-2021-4279 Vulnerability in maven package org.webjars.npm:fast-json-patch

CVE-2023-50710 Vulnerability in npm package hono

CVE-2022-21213 Vulnerability in npm package mout

CVE-2022-24785 Vulnerability in npm package moment

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory