CVE-2021-25945

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/05/2021
Last modified:
28/06/2022

Description

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:js-extend_project:js-extend:*:*:*:*:*:node.js:*:* 0.0.1 (including) 1.0.1 (including)