← Back

Deep Object Diff

deep-object-diff

Vendor: Deep Object Diff Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Deep Object Diff Project
1Deep Object Diff
Jun 17, 2026
Nov 3, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the '__proto__'...Show more
deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the '__proto__' property to be edited.Show less