CVE-2018-16489
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.8%
exploitation probability
1.8%top 22% of all CVEs
observed exploitation
nono source reports it
A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.
Affected products
HackerOne · just-extendReferences
https://hackerone.com/reports/430291