critical9.8
CVE-2018-16486
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
Impact
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Defaults-Deep Project | Defaults-Deep | through 0.2.4 |