• caglararli@hotmail.com
  • 05386281520

CVE-2024-38983 | alykoshin mini-deep-assign 0.0.8 /lib/index.js _assign prototype pollution

Çağlar Arlı      -    9 Views

CVE-2024-38983 | alykoshin mini-deep-assign 0.0.8 /lib/index.js _assign prototype pollution

A vulnerability has been found in alykoshin mini-deep-assign 0.0.8 and classified as problematic. This vulnerability affects the function _assign in the library /lib/index.js. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability was named CVE-2024-38983. The attack can be initiated remotely. There is no exploit available.