CVE-2021-40663: Prototype Pollution in deep.assign

Severity: Critical

CVSS Score: 9.8

deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').