| Package | Affected versions | Patched versions |
|---|---|---|
| node-extend | ≤ 0.2.0 | |
| node-extend | ≤ 0.2.0 |
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend function(A,B,as,isAargs) located within lib/extend.js is executed by the eval function, resulting in code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free