Prototype Pollution

2018-04-24T21:30:28
ID NODEJS:578
Type nodejs
Reporter Olivier Arteau (HoLyVieR)
Modified 2018-05-08T14:27:01

Description

Overview

Versions of mixin-deep before 1.3.1 are vulnerable to prototype pollution via merging functions.

Recommendation

Update to version 1.3.1 or later.

References