tocsin

Debian/node-mixin-deep: high 8.8

mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing

Action: Upgrade node-mixin-deep to 1.1.3-2 or later.

Affected

introducedfixedlast affected
01.1.3-2-

Fixed versions

1.1.3-2

Sources

published · modified · JSON