Lucene search
Veracode Vulnerability DatabaseVERACODE:6112HistoryApr 16, 2018 - 2:25 a.m.
Prototype Pollution
2018-04-1602:25:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.003 Low
EPSS
Percentile
70.2%
merge-objects is vulnerable to prototype pollution attacks. The vulnerability exists as the utility function allows modifying the prototype of Object.
| CPE | Name | Operator | Version |
|---|---|---|---|
| merge-objects | le | 1.0.5 |
Related
github
github
Prototype Pollution in async merge-object
2018-09-18 13:47:24
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (merge-objects)
2018-01-31 02:41:26
nvd
nvd
CVE-2018-3753
2018-07-03 21:29:00
prion
prion
Code injection
2018-07-03 21:29:00
cve
cve
CVE-2018-3753
2018-07-03 21:29:00
cvelist
cvelist
CVE-2018-3753
2018-05-24 00:00:00
osv
osv
CVE-2018-3753
2018-07-03 21:29:00
Prototype Pollution in async merge-object
2018-09-18 13:47:24