Prototype Pollution in merge-deep

🗓️ 26 Jul 2018 15:15:17Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Prototype Pollution in merge-deep vulnerability fix require

Reporter	Title	Published	Views	Family All 9
Hacker One	Node.js third-party modules: Prototype pollution attack (merge-deep)	31 Jan 201802:54	–	hackerone
Prion	Code injection	7 Jun 201802:29	–	prion
Node.js	Prototype Pollution	24 Apr 201814:34	–	nodejs
Veracode	Prototype Pollution	21 Feb 201802:32	–	veracode
OSV	CVE-2018-3722	7 Jun 201802:29	–	osv
CVE	CVE-2018-3722	7 Jun 201802:29	–	cve
Cvelist	CVE-2018-3722	7 Jun 201802:00	–	cvelist
NVD	CVE-2018-3722	7 Jun 201802:29	–	nvd
Github Security Blog	Prototype Pollution in merge-deep	26 Jul 201815:17	–	github

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-3722
github	www.github.com/jonschlinkert/merge-deep/commit/2c33634da7129a5aefcc262d2fec2e72224404e5
hackerone	www.hackerone.com/reports/310708
github	www.github.com/advisories/GHSA-9g9w-hmvj-5h57
npmjs	www.npmjs.com/advisories/580

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jul 2018 15:17Current

5.2Medium risk

Vulners AI Score5.2

EPSS0.001