description: mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
problem types: Prototype Pollution
affected:
{
product: mixin-deep
vendor: n/a
versions:
status: affected, version: All versions before 1.3.2 and version 2.0.0.
}