Lucene search

Prototype Pollution in set-value

🗓️ 13 Sep 2021 20:36:09Reported by GoogleType

osv🔗 osv.dev👁 20 Views

Prototype Pollution in set-value package vulnerability user-provided keys type confusion path parameter arrays bypass CVE-2019-1074

Reporter	Title	Published	Views	Family All 65
Prion	Type confusion	12 Sep 202113:15	–	prion
Prion	Code injection	23 Aug 201917:15	–	prion
Veracode	Prototype Pollution	13 Sep 202106:49	–	veracode
Veracode	Prototype Pollution	21 Jun 201902:48	–	veracode
Github Security Blog	Prototype Pollution in set-value	13 Sep 202120:09	–	github
Github Security Blog	Prototype Pollution in set-value	27 Aug 201917:43	–	github
CVE	CVE-2021-23440	12 Sep 202113:15	–	cve
CVE	CVE-2019-10747	23 Aug 201917:15	–	cve
OSV	CVE-2021-23440	12 Sep 202113:15	–	osv
OSV	Prototype Pollution in set-value	27 Aug 201917:43	–	osv

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23440
github	www.github.com/jonschlinkert/set-value/pull/33
github	www.github.com/jonschlinkert/set-value/pull/33/commits/383b72d47c74a55ae8b6e231da548f9280a4296a
github	www.github.com/jonschlinkert/set-value/commit/09c4b108fea3c0260008590053ff13da64913245
github	www.github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452
github	www.github.com/jonschlinkert/set-value/commit/cb12f14955dde6e61829d70d1851bfea6a3c31ad
github	www.github.com/jonschlinkert/set-value
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212
snyk	www.snyk.io/vuln/SNYK-JS-SETVALUE-1540541
huntr	www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Sep 2021 20:09Current

9.3High risk

Vulners AI Score9.3

EPSS0.014