Описание
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 3.0.2-1 |
| disco | not-affected | 3.0.2-1 |
| eoan | not-affected | 3.0.2-1 |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 3.0.2-1 |
| esm-apps/jammy | not-affected | 3.0.2-1 |
| esm-apps/noble | not-affected | 3.0.2-1 |
| esm-apps/xenial | needed |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.
A prototype pollution vulnerability was found in module extend <2.0.2, ...
Уязвимость компонента Object.prototype модуля extend программной платформы Node.js, позволяющая нарушителю добавить или изменить произвольные свойства прототипа объекта
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3