Description
A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
Remediation
References
https://hackerone.com/reports/430831
Related Vulnerabilities
CVE-2023-26109 Vulnerability in npm package node-bluetooth-serial-port
CVE-2022-4565 Vulnerability in maven package cn.hutool:hutool-core
CVE-2023-41835 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2022-1243 Vulnerability in maven package org.webjars.npm:urijs
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-jdk15to18