HIGH8.8

GHSA-cqp5-m4pq-gfgp

Prototype Pollution in defaults-deep

Quick fix

GHSA-cqp5-m4pq-gfgp — defaults-deep: upgrade to the fixed version with the command below.

npm install defaults-deep@0.2.4

Details

Versions of `default-deep` before 0.2.4 are vulnerable to prototype pollution

## Recommendation

Update to version 0.2.4 or later.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 0.2.4

Fixnpm install defaults-deep@0.2.4