Getadigital: >> Nested-Object-Assign Security Vulnerabilities
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.
CVSS Score
7.5
EPSS Score
0.003
Published
2021-01-31