CVE-2018-16491
nodejs-extend: Prototype pollution in Object.prototype
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS 3.0 · 9.8 Critical
EPSS 1.7%
KEV · Not listed
Vendors
Products