Описание
Prototype Pollution in node.extend
Versions of node.extend before 1.1.7 or 2.0.1 are vulnerable to prototype pollution.
Recommendation
Update to version 1.1.7, 2.0.1 or later.
Пакеты
Наименование
node.extend
npm
Затронутые версииВерсия исправления
< 1.1.7
1.1.7
Наименование
node.extend
npm
Затронутые версииВерсия исправления
= 2.0.0
2.0.1
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS3: 4.8
redhat
больше 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS3: 9.8
nvd
больше 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS3: 9.8
debian
больше 7 лет назад
A prototype pollution vulnerability was found in node.extend <1.1.7, ~ ...