Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23329

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c497-v8pv-ch6x

Prototype pollution in nested-object-assign The package nested-object-assign before 1.0.4 is vulnerable to Prototype Pollution via the default function.

gitlab/npm/nested-object-assign/CVE-2021-23329

The package nested-object-assign is vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.