Vulnerabilities > Extend Project

DATE CVE VULNERABILITY TITLE RISK
2019-02-01 CVE-2018-16492 Injection vulnerability in Extend Project Extend
A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.
network
low complexity
extend-project CWE-74
critical
9.8