Vulnetix
Try Vulnetix Request Demo
CVE-2018-3728 PUBLISHED

hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via __proto__, causing the addition or modification of an existing property that will exist on all objects.

EPSS 1.68% · 82.0th percentile

Risk Scores

EPSS Score
1.68%
82.0th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSnode-hoek0, 10.0.1+~cs12.0.0-1
Ubuntu:20.04:LTSnode-hoek0, 8.2.4+~4.2.1+~3.3.1-3, 8.5.0+~4.2.1+~3.3.1-1
Ubuntu:22.04:LTSnode-hoek0, 9.1.0+~cs10.1.0-1
Ubuntu:18.04:LTSnode-hoek0, 4.1.0-2
Ubuntu:25.10node-hoek0, 10.0.1+~cs12.0.0-1

Timeline

References

Open in Interactive Console →