Lucene search
+L

5 matches found

NVD
NVD
added 2022/06/24 8:15 p.m.36 views

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

9.8CVSS0.0142EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/06/24 8:00 p.m.55 views

CVE-2022-21231 Prototype Pollution

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

7.5CVSS9.8AI score0.0142EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/24 8:00 p.m.78 views

CVE-2022-21231

CVE-2022-21231 affects the deep-get-set package; all versions are vulnerable to prototype pollution via the deep function. The vulnerability stems from an incomplete fix of CVE-2020-7715. The available references describe the issue as a prototype pollution risk that could allow modification of Ob...

9.8CVSS8.5AI score0.0142EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/24 8:00 p.m.8 views

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

9.8CVSS7.3AI score0.0142EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
added 2022/01/19 8:53 a.m.2 views

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2020-7715 +1 more via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2020-7715, CVE-2022-21231 Source advisory: SNYK:JS-DEEPGETSET-2342655...

9.8CVSS5.3AI score0.01965EPSS
SaveExploits2
Rows per page
Query Builder