mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

Affected: npm: mixin-deep

Versions of `mixin-deep` before 1.3.1 are vulnerable to prototype pollution via merging functions.

## Recommendation

Update to version 1.3.1 or later.

Affected: Ubuntu:18.04:LTS: node-mixin-deep, Ubuntu:20.04:LTS: node-mixin-deep, Ubuntu:22.04:LTS: node-mixin-deep, Ubuntu:24.04:LTS: node-mixin-deep, Ubuntu:25.10: node-mixin-deep, Ubuntu:26.04:LTS: node-mixin-deep

mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Tivoli Netcool/OMNIbus ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.