CVE-2018-16486

Name of the Vulnerable Software and Affected Versions defaults-deep versions prior to a fixed version (no fixed version specified) defaults-deep (all versions)

Description A prototype pollution issue allows a malicious user to inject properties onto Object.prototype, given certain input. This can add or modify properties of the Object prototype, which will be present on all objects.

Recommendations For defaults-deep versions prior to a fixed version, consider selecting another module that can provide this functionality as no patch is currently available for this vulnerability. For all versions of defaults-deep, consider selecting another module that can provide this functionality as no patch is currently available for this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.