Lucene search
GoogleOSV:GHSA-F9CM-QMX5-M98HHistoryNov 01, 2018 - 2:45 p.m.
Prototype Pollution in merge
2018-11-0114:45:42
Google
osv.dev
9
0.001 Low
EPSS
Percentile
45.1%
Versions of merge before 1.2.1 are vulnerable to prototype pollution. The merge.recursive function can be tricked into adding or modifying properties of the Object prototype.
Recommendation
Update to version 1.2.1 or later.
Related
ubuntucve
ubuntucve
CVE-2018-16469
2018-10-30 00:00:00
nvd
nvd
CVE-2018-16469
2018-10-30 21:29:00
prion
prion
Design/Logic Flaw
2018-10-30 21:29:00
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack (merge.recursive)
2018-07-13 10:26:55
veracode
veracode
Prototype Pollution
2020-10-14 05:13:59
Prototype Pollution
2018-10-01 07:49:58
github
github
Prototype Pollution in merge
2018-11-01 14:45:42
nodejs
nodejs
Prototype Pollution
2018-11-05 17:04:20
osv
osv
CVE-2018-16469
2018-10-30 21:29:00
cve
cve
CVE-2018-16469
2018-10-30 21:29:00
cvelist
cvelist
CVE-2018-16469
2018-10-30 21:00:00
nessus
nessus
