WS-2018-0091 Low Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

WS-2018-0091 - Low Severity Vulnerability

Vulnerable Library - deep-extend-0.4.2.tgz

Recursive object extending

path: null

Library home page: https://registry.npmjs.org/deep-extend/-/deep-extend-0.4.2.tgz

Dependency Hierarchy:

• datastore-1.3.4.tgz (Root Library)
  • google-gax-0.14.5.tgz
    • grpc-1.7.3.tgz
      • node-pre-gyp-0.6.39.tgz
        • rc-1.2.2.tgz
          • ❌ deep-extend-0.4.2.tgz (Vulnerable Library)

Vulnerability Details

Versions of deep-extend before 0.5.1 are vulnerable to prototype pollution.

Publish Date: 2018-04-25

URL: WS-2018-0091

CVSS 2 Score Details (2.0)

Base Score Metrics not available

---

Step up your Open Source Security Game with WhiteSource here