{"action":"Upgrade extend to 2.0.2 or later.","affected":[{"fixed":"3.0.2","introduced":"3.0.0"},{"fixed":"2.0.2","introduced":"1.1.3"}],"component":"extend","cve_ids":["CVE-2018-16492"],"ecosystem":"npm","epss":0.0305,"exploited":false,"fixed_versions":["3.0.2","2.0.2"],"ghsa_id":"GHSA-qrmc-fj45-qfc2","id":"tcs_01M5KG71PJG00ZJTD0R309TPXJ","modified_at":"2026-02-03T03:09:19.104400Z","published_at":"2019-02-07T18:03:28Z","references":["https://osv.dev/vulnerability/GHSA-qrmc-fj45-qfc2","https://nvd.nist.gov/vuln/detail/CVE-2018-16492","https://github.com/github/advisory-database/pull/6695","https://github.com/justmoon/node-extend/pull/48","https://github.com/justmoon/node-extend/commit/0e68e71d93507fcc391e398bc84abd0666b28190","https://hackerone.com/reports/381185","https://github.com/justmoon/node-extend"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qrmc-fj45-qfc2","url":"https://osv.dev/vulnerability/GHSA-qrmc-fj45-qfc2"}],"summary":"Prototype Pollution in extend"}