Lucene search
Veracode Vulnerability DatabaseVERACODE:6113HistoryApr 16, 2018 - 2:33 a.m.
Prototype Pollution
2018-04-1602:33:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.003 Low
EPSS
Percentile
70.2%
merge-options is vulnerable to prototype pollution attacks. The vulnerability exists in the utility function where the prototype of Object can be overwritten to add or modify existing property on all objects.
| CPE | Name | Operator | Version |
|---|---|---|---|
| merge-options | le | 1.0.0 |
Related
prion
prion
Code injection
2018-07-03 21:29:00
osv
osv
CVE-2018-3752
2018-07-03 21:29:00
Prototype Pollution in merge-options
2018-10-09 00:19:57
nvd
nvd
CVE-2018-3752
2018-07-03 21:29:00
github
github
Prototype Pollution in merge-options
2018-10-09 00:19:57
cve
cve
CVE-2018-3752
2018-07-03 21:29:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (merge-options)
2018-02-01 14:17:41
cvelist
cvelist
CVE-2018-3752
2018-05-24 00:00:00