127 matches found
Prototype Pollution in object-path-set
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
GHSA-H6PR-C536-6RJG Prototype Pollution in object-path-set
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
CVE-2021-23507
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
CVE-2021-23507
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
CVE-2021-23507
CVE-2021-23507 affects the npm package object-path-set . Versions before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, enabling an attacker to merge properties into object prototypes. Impact can include denial of service or potential remote code execution, per the provided r...
CVE-2021-23507 Prototype Pollution
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
CVE-2021-23507
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
express-requests-loggly (>=0.1.0, <=0.1.2), mongoose-power-populate (>=1.0.0, <=1.3.4) +5 more potentially affected by CVE-2021-23507 via object-path-set (>=0.0.1, <=0.0.2)
object-path-set NPM version =0.0.1, =0.1.0, =1.0.0, =0.2.3, =0.2.0, =0.1.0, =0.1.0, =1.0.0, =1.1.1 Source cves: CVE-2021-23507 Source advisory: MEND:CVE-2021-23507...
CVE-2021-23507
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
Object-path security vulnerabilities
object-path is a personal developer's Npm library for accessing variables in data structures via paths. A security vulnerability exists in object-path-set prior to version 1.0.2, which stems from software that is vulnerable to Prototype Pollution via the setPath method, allowing an attacker to...
PT-2022-9404
Name of the Vulnerable Software and Affected Versions object-path-set versions prior to 1.0.2 Description The issue allows an attacker to merge object prototypes into it via the setPath method, enabling Prototype Pollution. This vulnerability is a result of an incomplete fix. Recommendations For...
CVE-2021-23507: Improperly Controlled Modification of Object Prototype Attributes
The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908...
Prototype Pollution
Overview object-path-set is a set values in javascript objects by specifying a path Affected versions of this package are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix ...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.9 security, bug, and container updates
Red Hat Advanced Cluster Management for Kubernetes 2.2.9 General Availability release images, which provide security updates, one or more container updates, and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syste...
Prototype Pollution in object-path
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'. The del function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like...
GHSA-8V63-CQQC-6R2C Prototype Pollution in object-path
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'. The del function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6847 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1, <=0.11.7)
object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2021-3805 Source advisory: OSV:GHSA-8V63-CQQC-6R2C...
-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6847 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1, <=0.11.7)
object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2021-3805 Source advisory: GHSA-8V63-CQQC-6R2C...