Prototype Pollution in nodee-utils

2021-05-0618:26:21

CWE-1321

GitHub Advisory Database

github.com

0.005 Low

EPSS

Percentile

76.8%

All versions of package nodee-utils below version 1.2.3 are vulnerable to Prototype Pollution via the deepSet function.

CPENameOperatorVersion
nodee-utilslt1.2.3

CPE	Name	Operator	Version
	nodee-utils	lt	1.2.3

References

github.com/advisories/GHSA-p6jh-p7q8-pcrg

github.com/nodee-apps/utils/commit/52460d936c52f03c9907bc99ac5e890970cef83c

nvd.nist.gov/vuln/detail/CVE-2020-7722

snyk.io/vuln/SNYK-JS-NODEEUTILS-598679

0.005 Low

EPSS

Percentile

76.8%

Related for GHSA-P6JH-P7Q8-PCRG