Lucene search
Jon SchlinkertNODEJS:1012HistoryJun 20, 2019 - 2:35 p.m.
Prototype Pollution
2019-06-2014:35:11
Jon Schlinkert
www.npmjs.com
26
EPSS
0.004
Percentile
75.1%
Overview
Versions of set-value prior to 3.0.1 or 2.0.1 are vulnerable to Prototype Pollution. The set function fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.
Recommendation
If you are using set-value 3.x, upgrade to version 3.0.1 or later.
If you are using set-value 2.x, upgrade to version 2.0.1 or later.
References
Related
debiancve
debiancve
CVE-2019-10747
2019-08-23 17:15:13
CVE-2021-23440
2021-09-12 13:15:07
nessus
nessus
Fedora 30 : nodejs-set-value (2020-1f1c94907b)
2020-02-10 00:00:00
Fedora 31 : nodejs-set-value (2020-582515fa8a)
2020-02-10 00:00:00
RHEL 8 : nodejs-set-value (Unpatched Vulnerability)
2024-05-11 00:00:00
ibm
ibm
mageia
mageia
Updated nodejs-set-value packages fix security vulnerability
2020-05-27 03:46:12
osv
osv
Prototype Pollution in set-value
2019-08-27 17:43:33
CVE-2019-10747
2019-08-23 17:15:13
Prototype Pollution in set-value
2021-09-13 20:09:36
fedora
fedora
[SECURITY] Fedora 30 Update: nodejs-set-value-2.0.1-1.fc30
2020-02-08 01:39:55
[SECURITY] Fedora 31 Update: nodejs-set-value-2.0.1-1.fc31
2020-02-08 02:05:37
github
github
Prototype Pollution in set-value
2019-08-27 17:43:33
Prototype Pollution in set-value
2021-09-13 20:09:36
cvelist
cvelist
CVE-2019-10747
2019-08-23 16:46:36
CVE-2021-23440 Prototype Pollution
2021-09-12 00:00:00
veracode
veracode
Prototype Pollution
2019-06-21 02:48:50
Prototype Pollution
2021-09-13 06:49:21
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0230)
2022-01-28 00:00:00
Fedora: Security Advisory for nodejs-set-value (FEDORA-2020-582515fa8a)
2020-02-08 00:00:00
Fedora: Security Advisory for nodejs-set-value (FEDORA-2020-1f1c94907b)
2020-02-08 00:00:00
ubuntucve
ubuntucve
CVE-2019-10747
2019-08-23 00:00:00
CVE-2021-23440
2021-09-12 00:00:00
nvd
nvd
CVE-2019-10747
2019-08-23 17:15:13
CVE-2021-23440
2021-09-12 13:15:07
cve
cve
CVE-2019-10747
2019-08-23 17:15:13
CVE-2021-23440
2021-09-12 13:15:07
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Set-Value Project Set-Value
2020-12-01 09:18:57
prion
prion
Code injection
2019-08-23 17:15:00
Type confusion
2021-09-12 13:15:00
redhatcve
redhatcve
CVE-2019-10747
2020-04-07 17:03:44
CVE-2021-23440
2021-09-16 15:05:30
oraclelinux
oraclelinux
nodejs:12 security update
2021-02-20 00:00:00
almalinux
almalinux
Moderate: nodejs:12 security update
2021-02-16 07:34:29
rocky
rocky
nodejs:12 security update
2021-02-16 07:34:29
redhat
redhat
(RHSA-2021:0549) Moderate: nodejs:12 security update
2021-02-16 07:34:29
(RHSA-2021:0485) Moderate: rh-nodejs12-nodejs security update
2021-02-11 13:08:55