Skip to content
OpenAdvisories

Package · npm

mixme

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-84p7-fh9c-6g8h

    Prototype Pollution in mixme

    ### Impact When copying properties from a source object to a target object, the target object can gain access to certain properties of the source object and modify their content. ### Patches The problem was patch with a more agressive discovery of secured pro…

    mixme npm
  • High 7.1
    CVE-2021-28860

    Use of Potentially Dangerous Function in mixme

    In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability…

    mixme npm