HIGH7.5
GHSA-c497-v8pv-ch6x
Prototype pollution in nested-object-assign
Quick fix
GHSA-c497-v8pv-ch6x — nested-object-assign: upgrade to the fixed version with the command below.
npm install nested-object-assign@1.0.4Details
The package nested-object-assign before 1.0.4 is vulnerable to Prototype Pollution via the default function.
Are you affected?
Enter the version of the package you're using.