Modification of Assumed-Immutable Data in Defaults-Deep Node Module by Jonschlinkert

CVE-2018-3723

What is CVE-2018-3723?

The defaults-deep node module, prior to version 0.2.4, is susceptible to a Modification of Assumed-Immutable Data (MAID) vulnerability. This flaw enables malicious actors to modify the 'Object' prototype through the proto property, which can lead to unauthorized changes or additions to properties that subsequently impact all objects in the application. Such alterations can have significant implications for application behavior and security, allowing for potential exploitation.

References