Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2018-3750

nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties

The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.

CVSS 3.0 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Deep Extend Project Redhat
Products
Deep Extend Enterprise Linux Rhel Software Collections