Lucene search
GoogleOSV:GHSA-R96C-57PF-9JJMHistoryFeb 07, 2019 - 6:17 p.m.
Prototype Pollution in node.extend
2019-02-0718:17:34
Google
osv.dev
9
0.004 Low
EPSS
Percentile
73.4%
Versions of node.extend before 1.1.7 or 2.0.1 are vulnerable to prototype pollution.
Recommendation
Update to version 1.1.7, 2.0.1 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node.extend | lt | 1.1.7 | |
| node.extend | eq | 2.0.0 |
Related
ubuntucve
ubuntucve
CVE-2018-16491
2019-02-01 00:00:00
veracode
veracode
Prototype Pollution
2019-02-04 01:17:46
debiancve
debiancve
CVE-2018-16491
2019-02-01 18:29:01
prion
prion
Buffer overflow
2019-02-01 18:29:00
cve
cve
CVE-2018-16491
2019-02-01 18:29:01
redhatcve
redhatcve
CVE-2018-16491
2019-10-12 01:35:29
nvd
nvd
CVE-2018-16491
2019-02-01 18:29:01
nodejs
nodejs
Prototype Pollution
2019-02-06 01:11:08
github
github
Prototype Pollution in node.extend
2019-02-07 18:17:34
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack in node.extend
2018-10-30 11:42:18
cvelist
cvelist
CVE-2018-16491
2019-02-01 18:00:00
