Skip to content
COOEY

FAIL › dossier

mixme

PRODUCT

Failure events
1
Zero-days
0
RCEs
1
On KEV
0
Critical
1
Worst shame
50
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 1
DATEEVENTSEVSUMMARY
2021-05-03 CVE-2021-28860 critical In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at ri