Hackerone Merge Deep Node Module vulnerabilities

1 vulnerability

Known vulnerabilities in Hackerone Merge Deep Node Module, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-3722hackeronemerge-deep node module+2
EPSS score
2.00%
merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.