Lucene search
Veracode Vulnerability DatabaseVERACODE:7543HistoryOct 01, 2018 - 7:29 a.m.
Prototype Pollution
2018-10-0107:29:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
EPSS
0.004
Percentile
73.4%
defaults-deep is vulnerable to prototype pollution. Properties of the Object prototype can be added or modified via JSON.parse, causing a denial of service condition or possibly remote code execution depending on the application.
Related
nvd
nvd
CVE-2018-16486
2019-02-01 18:29:00
osv
osv
Prototype Pollution in defaults-deep
2019-02-07 18:16:38
CVE-2018-16486
2019-02-01 18:29:00
hackerone
hackerone
prion
prion
Buffer overflow
2019-02-01 18:29:00
nodejs
nodejs
Prototype Pollution
2019-02-06 00:56:13
cve
cve
CVE-2018-16486
2019-02-01 18:29:00
github
github
Prototype Pollution in defaults-deep
2019-02-07 18:16:38
cvelist
cvelist
CVE-2018-16486
2019-02-01 18:00:00