← Back

Mixin Deep

mixin-deep

Vendor: Mixin Deep Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-10746
3Fedoraproject
Mixin Deep ProjectOracle
3Communications Cloud Native Core Network Function Cloud Native Environment
FedoraMixin Deep
Jun 17, 2026
Aug 23, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
CVE-2018-3719
1Mixin Deep Project
1Mixin Deep
Nov 21, 2024
Jun 7, 2018
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or mod...Show more
mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.Show less