Описание
Prototype Pollution in node.extend
Versions of node.extend before 1.1.7 or 2.0.1 are vulnerable to prototype pollution.
Recommendation
Update to version 1.1.7, 2.0.1 or later.
Пакеты
Наименование
node.extend
npm
Затронутые версииВерсия исправления
< 1.1.7
1.1.7
Наименование
node.extend
npm
Затронутые версииВерсия исправления
= 2.0.0
2.0.1
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS3: 4.8
redhat
около 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS3: 9.8
nvd
около 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS3: 9.8
debian
около 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~ ...