NPM
Releases13
Frequency7 months 5 days
Last Release
Port of jQuery.extend for node.js and the browser
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 2.0.2, >= 3.0.0, < 3.0.2, >= 1.1.3, < 2.0.2 | — | 7.5 HIGH | ||
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype. | ||||