Lucene search
Olivier Arteau (HoLyVieR)NODEJS:580HistoryApr 24, 2018 - 2:34 p.m.
Prototype Pollution
2018-04-2414:34:57
Olivier Arteau (HoLyVieR)
www.npmjs.com
12
0.001 Low
EPSS
Percentile
43.6%
Overview
Versions of merge-deep before 3.0.1 are vulnerable to prototype pollution via merging functions.
Recommendation
Update to version 3.0.1 or later.
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| merge-deep | lt | 3.0.1 |
Related
cve
cve
CVE-2018-3722
2018-06-07 02:29:08
osv
osv
Prototype Pollution in merge-deep
2018-07-26 15:17:15
CVE-2018-3722
2018-06-07 02:29:08
veracode
veracode
Prototype Pollution
2018-02-21 02:32:14
cvelist
cvelist
CVE-2018-3722
2018-04-26 00:00:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (merge-deep)
2018-01-31 02:54:40
prion
prion
Code injection
2018-06-07 02:29:00
nvd
nvd
CVE-2018-3722
2018-06-07 02:29:08
github
github
Prototype Pollution in merge-deep
2018-07-26 15:17:15