{"id":"GHSA-84p7-fh9c-6g8h","aliases":[],"status":"published","title":"Prototype Pollution in mixme","description":"### Impact\nWhen copying properties from a source object to a target object, the target object can gain access to certain properties of the source object and modify their content.\n\n### Patches\nThe problem was patch with a more agressive discovery of secured properties to filter out.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1321"],"published":"2021-09-20T19:52:24Z","modified":"2023-01-09T05:05:19Z","fixes":[{"ecosystem":"npm","package":"mixme","fixed_in":["0.5.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"mixme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2"}]}]},{"source":"osv","ecosystem":"npm","package":"mixme","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.5.2"}]}]}],"references":[{"url":"https://github.com/adaltas/node-mixme/security/advisories/GHSA-84p7-fh9c-6g8h","tags":["web"]},{"url":"https://github.com/adaltas/node-mixme/issues/1","tags":["web"]},{"url":"https://github.com/adaltas/node-mixme/issues/2","tags":["web"]},{"url":"https://github.com/adaltas/node-mixme/commit/db70fe9bcbba451e9f8bd794a9fa7cdfa00125ad","tags":["web"]},{"url":"https://github.com/advisories/GHSA-79jw-6wg7-r9g4","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-84p7-fh9c-6g8h"},{"url":"https://github.com/adaltas/node-mixme","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-84p7-fh9c-6g8h","title":"Prototype Pollution in mixme","description":"### Impact\nWhen copying properties from a source object to a target object, the target object can gain access to certain properties of the source object and modify their content.\n\n### Patches\nThe problem was patch with a more agressive discovery of secured properties to filter out.\n","status":"published","published":"2021-09-20T19:52:24Z","modified":"2023-01-09T05:05:19Z","cwes":["CWE-1321"],"updated_at":"2026-11-02T14:36:11.367194Z"}],"osv":[{"id":"GHSA-84p7-fh9c-6g8h","title":"Prototype Pollution in mixme","description":"### Impact\nWhen copying properties from a source object to a target object, the target object can gain access to certain properties of the source object and modify their content.\n\n### Patches\nThe problem was patch with a more agressive discovery of secured properties to filter out.\n","status":"published","published":"2021-09-20T19:52:24Z","modified":"2021-09-16T21:30:18Z","cwes":["CWE-1321"],"updated_at":"2026-11-02T15:46:41.732368Z"}]}}