Vulnerabilities > Adaltas > Mixme > 0.3.3

DATE CVE VULNERABILITY TITLE RISK
2021-05-03 CVE-2021-28860 Unspecified vulnerability in Adaltas Mixme
In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions.
network
low complexity
adaltas
critical
9.1