VDB
Sign up
HIGH8.8

GHSA-3mpr-hq3p-49h9

Prototype Pollution in mixin-deep

Quick fix

GHSA-3mpr-hq3p-49h9 — mixin-deep: upgrade to the fixed version with the command below.

npm install mixin-deep@1.3.1

Details

Versions of `mixin-deep` before 1.3.1 are vulnerable to prototype pollution via merging functions.

## Recommendation

Update to version 1.3.1 or later.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/mixin-deep
Introduced in: 0Fixed in: 1.3.1
Fixnpm install mixin-deep@1.3.1

References