Lucene search
Veracode Vulnerability DatabaseVERACODE:13303HistoryFeb 04, 2019 - 4:16 a.m.
Prototype Pollution
2019-02-0404:16:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.004
Percentile
73.4%
just-extend is vulnerable to prototype pollution. An attacker is able to inject arbitrary properties into Object.prototype to add or modify existing properties due to a lack of object validation.
Related
osv
osv
Prototype Pollution in just-extend
2019-02-07 18:17:12
cvelist
cvelist
CVE-2018-16489
2019-02-01 18:00:00
cve
cve
CVE-2018-16489
2019-02-01 18:29:00
github
github
Prototype Pollution in just-extend
2019-02-07 18:17:12
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack in just-extend
2018-10-29 17:03:52
nvd
nvd
CVE-2018-16489
2019-02-01 18:29:00
prion
prion
Design/Logic Flaw
2019-02-01 18:29:00
nodejs
nodejs
Prototype Pollution
2019-02-06 01:02:01
