Skip to content
OpenAdvisories

Package · npm

defaults-deep

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-16486

    Prototype Pollution in defaults-deep

    A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.

    HackerOne defaults-deep defaults-deep npm