CVE-2019-10746

CRITICAL · CVSS 9.8 EPSS 3.51%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-08-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-10746

Severity

CRITICAL

CVSS

9.8

EPSS

3.51%

Original NVD Description

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.