Eggjs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Eggjs records in CISA KEV

No Eggjs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Extend2 · all components

TI-2021-06166 CVE-2021-23568 · GHSA-gjm5-83cw-p3p2

MEDIUM 45

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01498 Published 2022-01-07 Fixed in 1.0.1 CWE-1321