Description
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-DEEPLY-451026
Related Vulnerabilities
CVE-2021-25930 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2021-27582 Vulnerability in maven package org.mitre:openid-connect-server
CVE-2022-24197 Vulnerability in maven package com.itextpdf:itext7-core
CVE-2021-26275 Vulnerability in npm package eslint-fixer
CVE-2020-28268 Vulnerability in npm package controlled-merge