deep-get-set (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package deep-get-set, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2020-7715 — CVSS 9.8 (critical): All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
• CVE-2022-21231 — CVSS 7.5 (high): All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. **Note:** This vulnerability derives…