mattphillips/deep-object-diff

mattphillips/deep-object-diff

GitHubGitHub
GitHubgithub.com
NPMwww.npmjs.com
Releases14
Frequency5 months 2 weeks
Last Release
Stars1.13K
Deep diffs two objects, including nested structures of arrays and objects, and returns the difference. ❄️
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-41713↗
5.3 MEDIUM—

deep-object-diff version 1.1.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the '__proto__' property to be edited.