HackerOne node.extend vulnerabilities
1 published CVE names HackerOne node.extend among the affected products.
- 1Published CVEs1 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2018-16491
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
HackerOne · node.extend
Critical9.8