Lucene search
AsgerfNODEJS:722HistoryNov 05, 2018 - 5:04 p.m.
Prototype Pollution
2018-11-0517:04:20
asgerf
www.npmjs.com
11
0.001 Low
EPSS
Percentile
45.1%
Overview
Versions of merge before 1.2.1 are vulnerable to prototype pollution. The merge.recursive function can be tricked into adding or modifying properties of the Object prototype.
Recommendation
Update to version 1.2.1 or later.
References
Related
ubuntucve
ubuntucve
CVE-2018-16469
2018-10-30 00:00:00
nvd
nvd
CVE-2018-16469
2018-10-30 21:29:00
prion
prion
Design/Logic Flaw
2018-10-30 21:29:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (merge.recursive)
2018-07-13 10:26:55
veracode
veracode
Prototype Pollution
2020-10-14 05:13:59
Prototype Pollution
2018-10-01 07:49:58
github
github
Prototype Pollution in merge
2018-11-01 14:45:42
osv
osv
CVE-2018-16469
2018-10-30 21:29:00
Prototype Pollution in merge
2018-11-01 14:45:42
cve
cve
CVE-2018-16469
2018-10-30 21:29:00
cvelist
cvelist
CVE-2018-16469
2018-10-30 21:00:00
nessus
nessus
