A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

Affected: npm: node.extend

Versions of `node.extend` before 1.1.7 or 2.0.1 are vulnerable to prototype pollution.

## Recommendation

Update to version 1.1.7, 2.0.1 or later.

Affected: Ubuntu:16.04:LTS: node-extend, Ubuntu:18.04:LTS: node-extend

A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.