Lucene search
+L

4 matches found

vulnersOsv
vulnersOsv
added 2022/02/19 12:1 a.m.17 views

@acanto/components (>=0.0.2 <=0.0.73), @acanto/components-header-subnav (>=0.0.2 <=0.0.37) +51 more potentially affected by CVE-2021-23702 via object-extend (=0.5.0)

object-extend NPM version =0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on object-extend and may be impacted: - @acanto/components =0.0.2, =0.0.2, =0.0.2, =0.0.3, =0.0.2, =0.0.2, =0.0.17, =0.0.2, =0.0.2, =0.0.65, =0.0.2, =0.0.2, =0.0.2, =0.0.4,...

9.8CVSS7.2AI score0.01378EPSS
SaveExploits1
OSV
OSV
added 2022/02/18 8:15 p.m.8 views

CVE-2021-23702

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend...

9.8CVSS7.3AI score0.01378EPSS
SaveExploits1References1
NVD
NVD
added 2022/02/18 8:15 p.m.20 views

CVE-2021-23702

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend...

9.8CVSS0.01378EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/02/18 8:0 p.m.30 views

CVE-2021-23702 Prototype Pollution

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend...

7.6CVSS9.7AI score0.01378EPSS
SaveExploits1References1
Rows per page
Query Builder