CVE-2020-28442 All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function

Description

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.

Affected products and versions

Product	Affected versions	Fixed in
js-data	Versions not published

Other CVEs of js-data

The 2 CVEs of js-data →

CVE-2021-23574 All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions 7.5 High