Vulnerabilities (CVE)

Filtered by CWE-471
Total 45 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-3723 1 Defaults-deep Project 1 Defaults-deep 2026-06-17 6.5 MEDIUM 8.8 HIGH
defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
CVE-2018-3722 1 Merge-deep Project 1 Merge-deep 2026-06-17 6.5 MEDIUM 8.8 HIGH
merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
CVE-2018-3721 2 Lodash, Netapp 3 Lodash, Active Iq Unified Manager, System Manager 2026-06-17 4.0 MEDIUM 6.5 MEDIUM
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
CVE-2018-3720 1 Assign-deep Project 1 Assign-deep 2026-06-17 6.5 MEDIUM 8.8 HIGH
assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
CVE-2018-3719 1 Mixin-deep Project 1 Mixin-deep 2026-06-17 6.5 MEDIUM 8.8 HIGH
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.