Lucene search

K
cvelistSnykCVELIST:CVE-2019-10746
HistoryAug 23, 2019 - 4:43 p.m.

CVE-2019-10746

2019-08-2316:43:49
snyk
www.cve.org
7

AI Score

9.2

Confidence

High

EPSS

0.007

Percentile

81.2%

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

CNA Affected

[
  {
    "product": "mixin-deep",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions before 1.3.2 and version 2.0.0."
      }
    ]
  }
]