Lucene search
SnykCVELIST:CVE-2019-10747HistoryAug 23, 2019 - 4:46 p.m.
CVE-2019-10747
2019-08-2316:46:36
snyk
www.cve.org
7
set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and proto payloads.
CNA Affected
[
{
"product": "set-value",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions before 2.0.1 and version 3.0.0"
}
]
}
]References
lists.apache.org/thread.html/b46f35559c4a97cf74d2dd7fe5a48f8abf2ff37f879083920af9b292%40%3Cdev.drat.apache.org%3E
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EJ36KV6MXQPUYTFCCTDY54E5Y7QP3AV/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E3HNLQZQINMZK6GYB2UTKK4VU7WBV2OT/
snyk.io/vuln/SNYK-JS-SETVALUE-450213
Related
osv
osv
Prototype Pollution in set-value
2019-08-27 17:43:33
CVE-2019-10747
2019-08-23 17:15:13
Prototype Pollution in set-value
2021-09-13 20:09:36
nessus
nessus
Fedora 30 : nodejs-set-value (2020-1f1c94907b)
2020-02-10 00:00:00
Fedora 31 : nodejs-set-value (2020-582515fa8a)
2020-02-10 00:00:00
RHEL 8 : nodejs-set-value (Unpatched Vulnerability)
2024-05-11 00:00:00
mageia
mageia
Updated nodejs-set-value packages fix security vulnerability
2020-05-27 03:46:12
debiancve
debiancve
CVE-2019-10747
2019-08-23 17:15:13
CVE-2021-23440
2021-09-12 13:15:07
nodejs
nodejs
Prototype Pollution
2019-06-20 14:35:11
ibm
ibm
github
github
Prototype Pollution in set-value
2019-08-27 17:43:33
Prototype Pollution in set-value
2021-09-13 20:09:36
fedora
fedora
[SECURITY] Fedora 30 Update: nodejs-set-value-2.0.1-1.fc30
2020-02-08 01:39:55
[SECURITY] Fedora 31 Update: nodejs-set-value-2.0.1-1.fc31
2020-02-08 02:05:37
veracode
veracode
Prototype Pollution
2019-06-21 02:48:50
Prototype Pollution
2021-09-13 06:49:21
openvas
openvas
Fedora: Security Advisory for nodejs-set-value (FEDORA-2020-582515fa8a)
2020-02-08 00:00:00
Mageia: Security Advisory (MGASA-2020-0230)
2022-01-28 00:00:00
Fedora: Security Advisory for nodejs-set-value (FEDORA-2020-1f1c94907b)
2020-02-08 00:00:00
ubuntucve
ubuntucve
CVE-2019-10747
2019-08-23 00:00:00
CVE-2021-23440
2021-09-12 00:00:00
nvd
nvd
CVE-2019-10747
2019-08-23 17:15:13
CVE-2021-23440
2021-09-12 13:15:07
prion
prion
Code injection
2019-08-23 17:15:00
Type confusion
2021-09-12 13:15:00
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Set-Value Project Set-Value
2020-12-01 09:18:57
cve
cve
CVE-2019-10747
2019-08-23 17:15:13
CVE-2021-23440
2021-09-12 13:15:07
redhatcve
redhatcve
CVE-2019-10747
2020-04-07 17:03:44
CVE-2021-23440
2021-09-16 15:05:30
cvelist
cvelist
CVE-2021-23440 Prototype Pollution
2021-09-12 12:55:10
oraclelinux
oraclelinux
nodejs:12 security update
2021-02-20 00:00:00
almalinux
almalinux
Moderate: nodejs:12 security update
2021-02-16 07:34:29
rocky
rocky
nodejs:12 security update
2021-02-16 07:34:29
redhat
redhat
(RHSA-2021:0485) Moderate: rh-nodejs12-nodejs security update
2021-02-11 13:08:55
(RHSA-2021:0549) Moderate: nodejs:12 security update
2021-02-16 07:34:29