CVE-2019-10747

🗓️ 23 Aug 2019 16:46:36Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 697 Views

set-value vulnerable to Prototype Pollution in versions < 3.0.

Reporter	Title	Published	Views	Family All 70
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in React, webpack and Node.js modules affect Tivoli Netcool/OMNIbus WebGUI	6 Oct 202204:09	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Automation Manager - Node.js (CVE-2019-10747)	15 May 202312:07	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js modules	29 Aug 202008:56	–	ibm
ATTACKERKB	CVE-2021-23440	12 Sep 202112:51	–	attackerkb
AlmaLinux	Moderate: nodejs:12 security update	16 Feb 202107:34	–	almalinux
BDU FSTEC	The vulnerability of the set function in the set-value library of the Afroara Application Software Center, related to uncontrolled changes in object prototypes’ attributes, allows attackers to execute a “prototype pollution” attack.	9 Jun 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : nodejs:12 (CESA-2021:0549)	11 Mar 202100:00	–	nessus

NVD

Node

set-value_project set-valueRange<2.0.1node.js

set-value_project set-valueRange3.0.0–3.0.1node.js

[
  {
    "product": "set-value",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions before 2.0.1 and version 3.0.0"
      }
    ]
  }
]

Source	Link
snyk	www.snyk.io/vuln/SNYK-JS-SETVALUE-450213
lists	www.lists.apache.org/thread.html/b46f35559c4a97cf74d2dd7fe5a48f8abf2ff37f879083920af9b292%40%3Cdev.drat.apache.org%3E
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E3HNLQZQINMZK6GYB2UTKK4VU7WBV2OT/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EJ36KV6MXQPUYTFCCTDY54E5Y7QP3AV/

17 Jun 2026 02:11Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 3.19.8

EPSS0.02427

CWE-400