Approved changes feed: RSS · Atom

cpe:2.3:a:moutjs:mout:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorMoutjs (01819b0b-644d-5ecd-bdb7-4527da8a7b99)
ProductMout (55a1c8f3-9d50-50cb-a289-d0c4a484e5f1)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21213 vulnerable 2026-06-08 05:40:00.435785 Prototype Pollution
HIGH (7.5)
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively is not checked, leading to exploiting this vulnerability. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7792](https://security.snyk.io/vuln/SNYK-JS-MOUT-1014544).
Published: 2022-06-17T20:05:12.401Z
Updated: 2024-09-16T19:26:02.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7792 vulnerable 2026-06-08 05:27:14.274097 Prototype Pollution
HIGH (7.5)
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used to access the target object recursively is not checked, leading to a Prototype Pollution.
Published: 2020-12-11T11:05:21.289Z
Updated: 2024-09-17T02:31:08.431Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.