Assign-deep_project Assign-deep
2 CVEs affecting Assign-deep_project Assign-deep. Latest disclosed: 2019-08-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3720 | High | 8.8 | 2018-06-07 | assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the pr… |
CVE-2019-10745 | High | 7.5 | 2019-08-20 | assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying… |