Read the docs

Dreamerslab

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Dreamerslab records in CISA KEV

No Dreamerslab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Node.extend 1 record MEDIUM

Records

1 record in Node.extend · all components

TI-2018-11832 CVE-2018-16491 · GHSA-r96c-57pf-9jjm

Uncontrolled resource consumption in HackerOne node.extend

Priority MEDIUM 45

A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01719 Published 2019-02-01 Fixed in 1.1.7, 2.0.1 CWE-400
Open these records in search →