Lucene search

K
osvGoogleOSV:GHSA-PH28-WWFJ-FV7F
HistoryMay 14, 2022 - 12:01 a.m.

Prototype Pollution in sds

2022-05-1400:01:08
Google
osv.dev
8

0.001 Low

EPSS

Percentile

39.0%

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618

CPENameOperatorVersion
sdsle4.4.0

0.001 Low

EPSS

Percentile

39.0%

Related for OSV:GHSA-PH28-WWFJ-FV7F