Lucene search
GitHub Advisory DatabaseGHSA-3MPR-HQ3P-49H9HistoryJul 26, 2018 - 3:10 p.m.
Prototype Pollution in mixin-deep
2018-07-2615:10:54
CWE-20
CWE-471
GitHub Advisory Database
github.com
11
0.001 Low
EPSS
Percentile
40.8%
Versions of mixin-deep before 1.3.1 are vulnerable to prototype pollution via merging functions.
Recommendation
Update to version 1.3.1 or later.
CPE configuration
mixindeepRange<1.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| mixin-deep | lt | 1.3.1 |
Related
veracode
veracode
Prototype Pollution
2018-02-21 01:58:32
nodejs
nodejs
Prototype Pollution
2018-04-24 14:30:28
osv
osv
CVE-2018-3719
2018-06-07 02:29:08
Prototype Pollution in mixin-deep
2018-07-26 15:10:54
nessus
nessus
Fedora 28 : nodejs-mixin-deep (2018-ab62814cee)
2019-01-03 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: nodejs-mixin-deep-1.3.1-1.fc28
2018-05-30 14:11:12
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (mixin-deep)
2018-02-01 00:21:10
cvelist
cvelist
CVE-2018-3719
2018-04-26 00:00:00
prion
prion
Code injection
2018-06-07 02:29:00
cve
cve
CVE-2018-3719
2018-06-07 02:29:08
ubuntucve
ubuntucve
CVE-2018-3719
2018-06-07 00:00:00
debiancve
debiancve
CVE-2018-3719
2018-06-07 02:29:08
openvas
openvas
Fedora Update for nodejs-mixin-deep FEDORA-2018-ab62814cee
2018-05-31 00:00:00
