CVE-2018-16492 - AskarLabs CVE Database

CVE-2018-16492

Vendor Hackerone

Product extend

Weakness CWE-400

Published February 1, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype.

Key dates

02Disclosure timeline

February 1, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-16492 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-47707 Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification CVE-2024-5013 WhatsUp Gold InstallController Denial-of-Service Vulnerability CVE-2023-40594 Denial of Service (DoS) via the ‘printf’ Search Function CVE-2026-6416 Tanium addressed an uncontrolled resource consumption vulnerability in Interact. CVE-2025-25186 Net::IMAP vulnerable to possible DoS by memory exhaustion