8 matches found
WS-2020-0081
get-setter through 0.0.0 is vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects...
app-state (>=0.3.0, <=2.0.1), grasshopper-framework (0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (0.0.0)
get-setter NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object 0.0.0 - model-object 0.0.0 Source cves: unknown CVE Source advisory: MEND:WS-2020-0...
app-state (>=0.3.0, <=2.0.1), grasshopper-framework (0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (0.0.0)
get-setter NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object 0.0.0 - model-object 0.0.0 Source cves: unknown CVE Source advisory:...
Prototype Pollution in get-setter
All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider...
GHSA-CH82-GQH6-9XJ9 Prototype Pollution in get-setter
All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider...
app-state (>=0.3.0, <=2.0.1), grasshopper-framework (0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (0.0.0)
get-setter NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object 0.0.0 - model-object 0.0.0 Source cves: unknown CVE Source advisory:...
PT-2020-21240
Name of the Vulnerable Software and Affected Versions get-setter versions affected versions not specified Description The issue concerns prototype pollution. The set function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing...
Prototype Pollution
Overview All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available...