mixin-deep Project mixin-deep 1.3.0 for Node.js

CPE Details

mixin-deep Project mixin-deep 1.3.0 for Node.js
mixin-deep_project
mixin-deep
1.3.0
2019-09-09
16h18 +00:00
2019-09-09
16h18 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:mixin-deep_project:mixin-deep:1.3.0:*:*:*:*:node.js:*:*

Informations

Vendor

mixin-deep_project

Product

mixin-deep

Version

1.3.0

Target Software

node.js

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-10746 2019-08-23 14h43 +00:00 mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
9.8
Critique
CVE-2018-3719 2018-06-07 02h00 +00:00 mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
8.8
Haute