Description
deeply is vulnerable to Prototype Pollution in versions before 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-DEEPLY-451026
Related Vulnerabilities
CVE-2022-0235 Vulnerability in npm package node-fetch
CVE-2021-21368 Vulnerability in maven package org.webjars.npm:msgpack5
CVE-2021-3794 Vulnerability in npm package @vuelidate/validators
CVE-2021-3780 Vulnerability in npm package peertube
CVE-2021-4279 Vulnerability in maven package org.webjars.bower:fast-json-patch