CVE-2021-28860
Assigner: mitre
Published: 2021-05-03T11:48:33
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
descriptions: value: In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denial of service (DoS).
problemTypes: descriptions: description: n/a
type: text