HIGH7.5

GHSA-mjjj-6p43-vhhv

Prototype Pollution in deep-get-set

Details

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7715](https://security.snyk.io/vuln/SNYK-JS-DEEPGETSET-598666)

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/deep-get-set

Introduced in: 0

No fixed version published yet for deep-get-set (npm). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-21231[ADVISORY]
https://github.com/acstll/deep-get-set[PACKAGE]
https://snyk.io/vuln/SNYK-JS-DEEPGETSET-2342655[WEB]