Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2020/09/04 3:14 p.m.31 views

Prototype Pollution in deep-setter

All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider usin...

5.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/04 3:14 p.m.14 views

GHSA-9QRG-H9G8-C65Q Prototype Pollution in deep-setter

All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider usin...

7AI score
SaveExploits0References1
nodejs
nodejs
added 2019/11/19 11:0 p.m.18 views

Prototype Pollution

Overview All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder