Adaltas: community verdicts

1 notable / known-exploited Adaltas CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Adaltas CVE, see NVD ↗.

CVE-2021-28860CRIT 9.1Real · low riskEPSS 2%
In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denial of service (DoS).