CVE-2018-16491
1 advisory.
npm/node.extend CVE-2018-16491: critical 9.8
Prototype Pollution in node.extend
Action: Upgrade node.extend to 1.1.7 or later.
npm i node.extend@1.1.7npm i node.extend@2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.7 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.1.7 | 2.0.1 |
Sources
- osv: GHSA-r96c-57pf-9jjm
- https://nvd.nist.gov/vuln/detail/CVE-2018-16491
- https://hackerone.com/reports/430831
- https://github.com/advisories/GHSA-r96c-57pf-9jjm
- https://www.npmjs.com/advisories/781
CVE-2018-16491 · published · modified · JSON