Lucene search
GoogleOSV:CVE-2018-16469HistoryOct 30, 2018 - 9:29 p.m.
CVE-2018-16469
2018-10-3021:29:00
Google
osv.dev
4
0.001 Low
EPSS
Percentile
45.1%
The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.
References
Related
ubuntucve
ubuntucve
CVE-2018-16469
2018-10-30 00:00:00
nvd
nvd
CVE-2018-16469
2018-10-30 21:29:00
prion
prion
Design/Logic Flaw
2018-10-30 21:29:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (merge.recursive)
2018-07-13 10:26:55
veracode
veracode
Prototype Pollution
2020-10-14 05:13:59
Prototype Pollution
2018-10-01 07:49:58
github
github
Prototype Pollution in merge
2018-11-01 14:45:42
nodejs
nodejs
Prototype Pollution
2018-11-05 17:04:20
cve
cve
CVE-2018-16469
2018-10-30 21:29:00
osv
osv
Prototype Pollution in merge
2018-11-01 14:45:42
cvelist
cvelist
CVE-2018-16469
2018-10-30 21:00:00
nessus
nessus
