4 matches found
GHSA-CH82-GQH6-9XJ9 Prototype Pollution in get-setter
All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider...
app-state (>=0.3.0 <=2.0.1), grasshopper-framework (=0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (=0.0.0)
get-setter NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object =0.0.0 - model-object =0.0.0 Source cves: unknown CVE Source advisory:...
Prototype Pollution in get-setter
All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider...
Prototype Pollution
Overview All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available...