Description
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-DEEPLY-451026
Related Vulnerabilities
CVE-2022-0350 Vulnerability in npm package vditor
CVE-2017-16226 Vulnerability in maven package org.webjars.npm:static-eval
CVE-2020-15232 Vulnerability in maven package org.mapfish.print:print-standalone
CVE-2022-33987 Vulnerability in npm package got
CVE-2020-5259 Vulnerability in maven package org.webjars.bower:dojox