CVE-2018-3753
1 advisory.
npm/merge-object CVE-2018-3753: critical 9.8
Prototype Pollution in async merge-object
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fp82-2h99-3fpp
- https://nvd.nist.gov/vuln/detail/CVE-2018-3753
- https://hackerone.com/reports/310706
CVE-2018-3753 · published · modified · JSON