Vulnerability Details CVE-2021-23452
This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 66.9%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 7.5
References
Products affected by CVE-2021-23452
-
cpe:2.3:a:binaryops:x-assign:0.1.1
-
cpe:2.3:a:binaryops:x-assign:0.1.2
-
cpe:2.3:a:binaryops:x-assign:0.1.3
-
cpe:2.3:a:binaryops:x-assign:0.1.4