vulnerability
Alma Linux: CVE-2018-3750: Moderate: nodejs:12 security update (ALSA-2021-0549)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Jul 3, 2018 | May 4, 2022 | Apr 17, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Jul 3, 2018
Added
May 4, 2022
Modified
Apr 17, 2026
Description
The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.
Solutions
alma-upgrade-nodejs-nodemonalma-upgrade-nodejs-packaging
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.