Node.extend (Hackerone) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-02-01. Vendor: Hackerone.

CVEs of Node.extend

• CVE-2018-16491 - CVSS 9.8 (critical), 2019-02-01: A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.