Description
This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.
Remediation
References
https://runkit.com/embed/sq8qjwemyn8t
https://snyk.io/vuln/SNYK-JS-XASSIGN-1759314
Related Vulnerabilities
CVE-2021-23353 Vulnerability in maven package org.webjars.bowergithub.mrrio:jspdf
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2019-12409 Vulnerability in maven package org.apache.solr:solr-core
CVE-2022-24947 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2023-45133 Vulnerability in maven package org.webjars.npm:babel__traverse