adaltas

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

adaltas records in CISA KEV

No adaltas vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Mixme · all components

TI-2021-09842 CVE-2021-28860 · GHSA-r5cq-9537-9rpf

MEDIUM 43

In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01843 Published 2021-05-03 Fixed in 0.5.1 CWE-1321