Node.js mixme module is vulnerable to a denial of service which is caused by a prototype pollution flaw in the mutate() and merge() functions. A remote attacker can exploit the vulnerability by sending a specially-crafted request that can cause a denial of service condition.
Denial of Service
Node.js mixme 0.5.0
Upgrade to the latest version of mixme (0.5.1 or later) at https://www.npmjs.com/advisories/1668