7.5
Élevée
CVE-2021-23574 All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions
Description
All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of [CVE-2020-28442](https://snyk.io/vuln/SNYK-JS-JSDATA-1023655).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| js-data | Versions non publiées |