Modification of Assumed-Immutable Data (MAID) The advisory has been revoked - it doesn't affect any version of package nodejs-full-i18n (opens in a new tab)

Threat Intelligence

3.65% (90^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL8-NODEJSFULLI18N-1465017
published26 Jul 2021
disclosed19 Jun 2019

Report a new vulnerability Found a mistake?

Introduced: 19 Jun 2019

CVE-2019-10746 (opens in a new tab) CWE-471 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream nodejs-full-i18n package and not the nodejs-full-i18n package as distributed by RHEL.

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.