Skip to content

Vendor

deep extend project vulnerabilities

1 published CVE affecting deep extend project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of deep extend project alerts

Products

Latest deep extend project CVEs

Newest publication first

  1. CVE-2018-3750 Prototype Pollution in deep-extend

    Published
    CriticalCVSS 9.8 EPSS 2.1%

    The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.