Security Advisory

CVE-2018-16486

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-02-01 18:00:00

Last updated 2024-08-05 10:24:32

Assigner hackerone

CVSS score not scored

State PUBLISHED

A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.