Modification of Assumed-Immutable Data Vulnerability in Merge-Deep Node Module

CVE-2018-3722

What is CVE-2018-3722?

The Merge-Deep node module prior to version 3.0.1 is susceptible to a Modification of Assumed-Immutable Data (MAID) vulnerability. This flaw allows an attacker to alter the prototype of 'Object' through the proto property. As a result, malicious users can add or change properties that will be inherited by all object instances, potentially leading to inconsistent object behaviors and security implications within an application utilizing this module.

References