[SECURITY] [DLA 3291-1] node-object-path security update

🗓️ 29 Jan 2023 16:18:03Reported by DebianType

Debian LTS Advisory DLA-3291-1 node-object-path security update. Vulnerable to prototype pollution and type confusion. Upgrade node-object-path packages

Reporter	Title	Published	Views	Family All 77
huntr	Prototype Pollution in mariocasciaro/object-path	14 Sep 202000:00	–	huntr
huntr	Prototype Pollution in mariocasciaro/object-path	13 Sep 202114:22	–	huntr
ibm	Security Bulletin: There is a vulnerablity in the object-path library affecting IBM watsonx Code Assistant IDE Extensions	8 Apr 202507:36	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
ibm	Security Bulletin: Version 0.11.4 of Node.js module object-path included in IBM Netcool Operations Insight 1.6.2.x has a security vulnerability	15 Dec 202018:41	–	ibm
ibm	Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities	1 Apr 202216:38	–	ibm
attackerkb	CVE-2021-23434	27 Aug 202116:47	–	attackerkb
attackerkb	CVE-2021-3805	17 Sep 202106:15	–	attackerkb
bdu_fstec	The vulnerability of the set function in the object-path library of the Aurora Application Software Center, related to uncontrolled changes to prototype attributes of objects, allows attackers to execute a “prototype pollution” attack.	9 Jun 202100:00	–	bdu_fstec
bdu_fstec	The vulnerability of the Node Object-path module, related to type conversion errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	6 Apr 202200:00	–	bdu_fstec