CVE-2021-23452: Binaryops X-Assign

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object.

Affected products

• Binaryops X-Assign: any version

Published 2021-10-20. Last modified 2026-06-17.