CVE-2021-23558

2022-01-2822:15:09

Google

osv.dev

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. Note: This vulnerability derives from an incomplete fix in CVE-2020-7736

CPENameOperatorVersion
bmooreq0.4.2
bmooreq0.3.11
bmooreq0.3.25
bmooreq0.0.6
bmooreq0.5.1
bmooreq0.3.7
bmooreq0.4.5
bmooreq0.1.0
bmooreq0.3.15
bmooreq0.0.4