Lucene search
Veracode Vulnerability DatabaseVERACODE:13292HistoryFeb 04, 2019 - 1:17 a.m.
Prototype Pollution
2019-02-0401:17:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.004 Low
EPSS
Percentile
73.4%
node.extend is vulnerable to prototype pollution attacks. An attacker is able to inject arbitrary properties into Object.prototype to add or modify properties due to a lack of object validation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node.extend | eq | 2.0.0 | |
| node.extend | le | 1.1.6 |
Related
nodejs
nodejs
Prototype Pollution
2019-02-06 01:11:08
github
github
Prototype Pollution in node.extend
2019-02-07 18:17:34
prion
prion
Buffer overflow
2019-02-01 18:29:00
debiancve
debiancve
CVE-2018-16491
2019-02-01 18:29:01
ubuntucve
ubuntucve
CVE-2018-16491
2019-02-01 00:00:00
cve
cve
CVE-2018-16491
2019-02-01 18:29:01
redhatcve
redhatcve
CVE-2018-16491
2019-10-12 01:35:29
osv
osv
Prototype Pollution in node.extend
2019-02-07 18:17:34
nvd
nvd
CVE-2018-16491
2019-02-01 18:29:01
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack in node.extend
2018-10-30 11:42:18
cvelist
cvelist
CVE-2018-16491
2019-02-01 18:00:00
