The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Aug 23, 2019 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-devel | Feb 17, 2021 | Aug 23, 2019 |
| Debian | — | Upgrade node-mixin-deep | Jul 30, 2024 | Aug 23, 2019 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs | Feb 20, 2021 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-packagingNo solution existsUpgrade nodejsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-devel | Feb 17, 2021 | Aug 23, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 23, 2019 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 23, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub