Prototype Pollution

🗓️ 20 Jun 2019 14:51:39Reported by Snyk Security TeamType

Versions of `mixin-deep` prior to 2.0.1 or 1.3.2 are vulnerable to Prototype Pollution. The `mixinDeep` function fails to validate which Object properties it updates, allowing attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in React, webpack and Node.js modules affect Tivoli Netcool/OMNIbus WebGUI	6 Oct 202204:09	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities	1 Apr 202216:38	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js modules	29 Aug 202008:56	–	ibm
AlmaLinux	Moderate: nodejs:12 security update	16 Feb 202107:34	–	almalinux
Tenable Nessus	CentOS 8 : nodejs:12 (CESA-2021:0549)	11 Mar 202100:00	–	nessus
Tenable Nessus	Fedora 30 : nodejs-mixin-deep (2020-4a8f110332)	10 Feb 202000:00	–	nessus
Tenable Nessus	Fedora 31 : nodejs-mixin-deep (2020-f80e5c0d65)	10 Feb 202000:00	–	nessus