Lucene search
GoogleOSV:GHSA-675M-85RW-J3W4HistoryFeb 07, 2019 - 6:17 p.m.
Prototype Pollution in just-extend
2019-02-0718:17:12
Google
osv.dev
11
EPSS
0.004
Percentile
73.4%
Versions of just-extend before 4.0.0 are vulnerable to prototype pollution. Provided certain input just-extend can add or modify properties of the Object prototype. These properties will be present on all objects.
Recommendation
Update to version 4.0.0 or later.
Related
veracode
veracode
Prototype Pollution
2019-02-04 04:16:33
cvelist
cvelist
CVE-2018-16489
2019-02-01 18:00:00
cve
cve
CVE-2018-16489
2019-02-01 18:29:00
github
github
Prototype Pollution in just-extend
2019-02-07 18:17:12
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack in just-extend
2018-10-29 17:03:52
nvd
nvd
CVE-2018-16489
2019-02-01 18:29:00
prion
prion
Design/Logic Flaw
2019-02-01 18:29:00
nodejs
nodejs
Prototype Pollution
2019-02-06 01:02:01
