Description
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
Remediation
References
https://hackerone.com/reports/380878
Related Vulnerabilities
CVE-2022-21126 Vulnerability in maven package com.github.samtools:htsjdk
CVE-2020-15252 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2022-2932 Vulnerability in npm package mobiledoc-kit
CVE-2023-29208 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore