Defaults Deep

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:defaults-deep_project:defaults-deep:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorDefaults Deep Project (ca77e95e-15e5-5768-8d05-c3eb220a6b13)
ProductDefaults Deep (2670b210-cd05-5c4e-889a-87104b7f45d1)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3723 vulnerable 2026-06-08 05:11:41.174949 Details available
defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.
Published: 2018-06-07T02:00:00.000Z
Updated: 2024-09-16T21:08:12.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16486 vulnerable 2026-06-08 05:11:04.938190 Details available
A prototype pollution vulnerability was found in defaults-deep <=0.2.4 that would allow a malicious user to inject properties onto Object.prototype.
Published: 2019-02-01T18:00:00.000Z
Updated: 2024-08-05T10:24:32.798Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.