← All advisories

Critical severityNVD Advisory· Published Feb 1, 2019· Updated Aug 5, 2024

CVE-2018-16486

CVE-2018-16486

Description

A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
defaults-deepnpm	<= 0.2.4	—

Affected products

2

ghsa-coords
pkg:npm/defaults-deep
Range: <= 0.2.4
HackerOne/defaults-deepv5
Range: <=0.2.4

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-pjxw-22xf-6pwcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-16486ghsaADVISORY
hackerone.com/reports/380878ghsax_refsource_MISCWEB
www.npmjs.com/advisories/778ghsaWEB

News mentions

0

No linked articles in our index yet.