Most recent entries from all

EUVD-2026-68175

fkie_cve-2018-16491

A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

GHSA-r96c-57pf-9jjm — Prototype Pollution in node.extend

Affected: npm: node.extend

Versions of `node.extend` before 1.1.7 or 2.0.1 are vulnerable to prototype pollution.

## Recommendation

Update to version 1.1.7, 2.0.1 or later.

gsd-2018-16491

UBUNTU-CVE-2018-16491

Affected: Ubuntu:16.04:LTS: node-extend, Ubuntu:18.04:LTS: node-extend

A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.