PT-2019-20084 · Deap · Deap

Published 2019-05-31 · Updated 2019-05-31

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions deap versions prior to 1.0.1

Description The issue concerns prototype pollution in the deap software.

Recommendations Update to version 1.0.1 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

GHSA-XRMP-99WJ-P6JC

Affected Products

Deap

References · 4

• https://osv.dev/vulnerability/GHSA-xrmp-99wj-p6jc · Vendor Advisory
• https://hackerone.com/reports/310446 · Note
• https://snyk.io/vuln/npm:deap:20180415 · Note
• https://npmjs.com/advisories/611 · Note