← CVE Intelligence

CVE-2018-16491

HackerOne / node.extend PUBLISHED

Description (CNA)

A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

Affected (CNA)

Vendor / productVersions
HackerOne / node.extendaffected <1.1.7, ~<2.0.1

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.