CVE-2019-10746

CVE-2019-10746: vulnerability in mixin-deep

Published · Updated

Follow this CVE+ Monitor mixin-deep+ Monitor node-mixin-deep

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.7%
mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
Affected products
n/a · mixin-deep