Lucene search

CVE-2019-10746

🗓️ 23 Aug 2019 17:13:15Reported by [email protected]Type

mixin-deep vulnerability to prototype pollution in versions before 1.3.2 and 2.0.0

Reporter	Title	Published	Views	Family All 42
GithubExploit	Exploit for Argument Injection in Mixin-Deep Project Mixin-Deep	1 Dec 202009:18	–	githubexploit
OpenVAS	Fedora: Security Advisory for nodejs-mixin-deep (FEDORA-2020-4a8f110332)	8 Feb 202000:00	–	openvas
OpenVAS	Fedora: Security Advisory for nodejs-mixin-deep (FEDORA-2020-f80e5c0d65)	8 Feb 202000:00	–	openvas
RedhatCVE	CVE-2019-10746	30 Mar 202008:17	–	redhatcve
Fedora	[SECURITY] Fedora 30 Update: nodejs-mixin-deep-1.3.2-1.fc30	8 Feb 202001:39	–	fedora
Fedora	[SECURITY] Fedora 31 Update: nodejs-mixin-deep-1.3.2-1.fc31	8 Feb 202002:05	–	fedora
OSV	CVE-2019-10746	23 Aug 201917:15	–	osv
OSV	Prototype Pollution in mixin-deep	27 Aug 201917:42	–	osv
OSV	Moderate: nodejs:12 security update	16 Feb 202107:34	–	osv
OSV	Moderate: nodejs:12 security update	16 Feb 202107:34	–	osv

Nvd

Node

mixin-deep_project mixin-deepRange<1.3.2node.js

mixin-deep_project mixin-deepMatch2.0.0node.js

Node

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

Node

oracle communications_cloud_native_core_network_function_cloud_native_environmentMatch1.4.0

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXRA365KZCUNXMU3KDH5JN5BEPNIGUKC/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFNIVG2XYFPZJY3DYYBJASZ7ZMKBMIJT/
oracle	www.oracle.com//security-alerts/cpujul2021.html
snyk	www.snyk.io/vuln/SNYK-JS-MIXINDEEP-450212

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Aug 2019 17:15Current

9.3High risk

Vulners AI Score9.3

CVSS27.5

CVSS39.8

EPSS0.007

CWE-88