The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade nodejs-nodemon | May 4, 2022 | Aug 23, 2019 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-devel | Feb 17, 2021 | Aug 23, 2019 |
| Debian | — | Upgrade node-mixin-deep | Jul 30, 2024 | Aug 23, 2019 |
| Oracle_linux | — | Upgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-nodemon | Feb 20, 2021 | Jun 19, 2019 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade npmUpgrade nodejs-debugsourceNo solution existsUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-docs | Feb 17, 2021 | Aug 23, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 23, 2019 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 23, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub