https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:39:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-53931 EUVD-2026-53931 https://cve.radiocsirt.org/vuln/euvd-2026-53931 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10745 <p>assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.</p> <p>assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a _proto_ payload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10745 https://cve.radiocsirt.org/vuln/ghsa-66rh-8fw6-59q6 <p><strong>Affected:</strong> npm: assign-deep</p> <p>Versions of `assign-deep` prior to 1.0.1 and 0.4.8 are vulnerable to Prototype Pollution. The `assign` function fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.</p> <p>## Recommendation</p> <p>Upgrade to versions 1.0.1, 0.4.8, or later.</p> <p><strong>Affected:</strong> npm: assign-deep</p> <p>Versions of `assign-deep` prior to 1.0.1 and 0.4.8 are vulnerable to Prototype Pollution. The `assign` function fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.</p> <p>## Recommendation</p> <p>Upgrade to versions 1.0.1, 0.4.8, or later.</p> https://cve.radiocsirt.org/vuln/ghsa-66rh-8fw6-59q6 https://cve.radiocsirt.org/vuln/gsd-2019-10745 gsd-2019-10745 https://cve.radiocsirt.org/vuln/gsd-2019-10745