Vulnerability index

Browse CVEs

2 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Defaults Deep CRITICAL 9.8

CVE-2018-16486

A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.

Fix: after 0.2.4

Fix from $2,300 2019-02-01

Defaults Deep HIGH 8.8

CVE-2018-3723

defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to m…

Fix: 0.2.4+

Fix from $1,950 2018-06-07