CVE-2022-21189

🗓️ 01 May 2022 16:08:15Reported by [email protected]Type

Package dexie has prototype pollution vulnerability in Dexie.setByKeyPath function before version 3.2.2 or from 4.0.0-alpha.1 to 4.0.0-alpha.3

Reporter	Title	Published	Views	Family All 10
Veracode	Prototype Pollution	5 May 202216:48	–	veracode
OSV	CVE-2022-21189	1 May 202216:15	–	osv
OSV	Prototype Pollution in Dexie	3 May 202200:00	–	osv
Cvelist	CVE-2022-21189 Prototype Pollution	1 May 202215:25	–	cvelist
Prion	Design/Logic Flaw	1 May 202216:15	–	prion
CVE	CVE-2022-21189	1 May 202216:15	–	cve
Github Security Blog	Prototype Pollution in Dexie	3 May 202200:00	–	github
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202316:39	–	ibm
Tenable Nessus	Oracle Database Server (Jul 2023 CPU)	19 Jul 202300:00	–	nessus
Oracle	Oracle Critical Patch Update Advisory - July 2023	18 Jul 202300:00	–	oracle

Nvd

Node

dexie dexieRange<3.2.2node.js

dexie dexieMatch4.0.0alpha1

dexie dexieMatch4.0.0alpha2

Source	Link
snyk	www.snyk.io/vuln/SNYK-JS-DEXIE-2607042
github	www.github.com/dexie/Dexie.js/commit/1d655a69b9f28c3af6fae10cf5c61df387dc689b
github	www.github.com/dexie/Dexie.js/blob/fe682ef24568278c3b31d9d6c93de095d4b77ae8/src/functions/utils.ts%23L134-L164
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805308

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 May 2022 16:15Current

CVSS27.5

CVSS39.8

EPSS0.008

CWE-1321