[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252212

 
 

909

 
 

196748

 
 

282

Paid content will be excluded from the download.


Download | Alert*


oval:org.secpod.oval:def:2001172
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

oval:org.secpod.oval:def:114574
Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.

CWE    1
CWE-20
*CVE
CVE-2018-3719

© SecPod Technologies