Merge-object Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Merge-object Project records in CISA KEV

No Merge-object Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Merge-object 1 record MEDIUM

Records

1 record

TI-2018-02749 CVE-2018-3753 · GHSA-fp82-2h99-3fpp

The utilities function in all versions <= 1.0.0 of the merge-objects node module can be…

MEDIUM 45

The utilities function in all versions <= 1.0.0 of the merge-objects node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01428 Published 2018-07-03 No fix listed CWE-20

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0