VDB
Sign up
CRITICAL9.8

GHSA-85cp-p426-42f5

Prototype Pollution in deep-get-set

Quick fix

GHSA-85cp-p426-42f5 — deep-get-set: upgrade to the fixed version with the command below.

npm install deep-get-set@1.1.1

Details

All versions of package deep-get-set prior to version 1.1.1 are vulnerable to Prototype Pollution via the main function.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/deep-get-set
Introduced in: 0Fixed in: 1.1.1
Fixnpm install deep-get-set@1.1.1

References