GCVE - cpe:2.3:a:collection.js_project:collection.js:*:*:*:*:*:node.js:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:collection.js_project:collection.js:*:*:*:*:*:node.js:*:*

part: a version: * update: *

Vendor	Collection.Js Project (`d5644be8-9991-5f8b-966c-32f1c7bd4096`)
Product	Collection.Js (`41fcfdb6-90fc-5646-bdba-adaa899d7bee`)
Edition	*
Language	*
Software edition	*
Target software	node.js
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-26113`	vulnerable	2026-06-08 05:57:38.640421	Details available HIGH (7.5) Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js. Published: 2023-03-18T05:00:01.243Z Updated: 2025-02-26T17:12:06.093Z Open on db.gcve.eu Reference links https://security.snyk.io/vuln/SNYK-JS-COLLECTIONJS-3185148 https://github.com/kobezzza/Collection/issues/27 https://github.com/kobezzza/Collection/blob/be32c48e68f49d3be48a58e929d1ab8ff1d2d19c/dist/node/iterators/extend.js%23L324 https://github.com/kobezzza/Collection/releases/tag/v6.8.1 https://github.com/kobezzza/Collection/commit/d3d937645f62f37d3115d6aa90bb510fd856e6a2	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.