CVE-2018-3750
1 advisory.
npm/deep-extend CVE-2018-3750: critical 9.8, EPSS 2.15%
Prototype Pollution in deep-extend
Action: Upgrade deep-extend to 0.5.1 or later.
npm i deep-extend@0.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.1 | - |
Fixed versions
| 0.5.1 |
Sources
- osv: GHSA-hr2v-3952-633q
- https://nvd.nist.gov/vuln/detail/CVE-2018-3750
- https://github.com/unclechu/node-deep-extend/commit/9423fae877e2ab6b4aecc4db79a0ed63039d4703
- https://hackerone.com/reports/311333
- https://github.com/advisories/GHSA-hr2v-3952-633q
- https://www.npmjs.com/advisories/612
CVE-2018-3750 · published · modified · JSON