Lucene search
K

6 matches found

OSV
OSV
added 2022/05/14 12:1 a.m.0 views

GHSA-PH28-WWFJ-FV7F Prototype Pollution in sds

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS6.4AI score0.00318EPSS
Exploits2References5
NVD
NVD
added 2022/05/13 8:15 p.m.12 views

CVE-2022-25862

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS0.0023EPSS
Exploits1References2
OSV
OSV
added 2022/05/13 8:15 p.m.1 views

CVE-2022-25862

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS5.8AI score0.0023EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/05/13 8:5 p.m.15 views

CVE-2022-25862 Prototype Pollution

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

4CVSS6.4AI score0.0023EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/13 8:0 p.m.2 views

CVE-2022-25862

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS6.4AI score0.00318EPSS
Exploits2References3
Snyk
Snyk
added 2022/01/27 2:40 p.m.2 views

Prototype Pollution

Overview sds is a structured data search package. Affected versions of this package are vulnerable to Prototype Pollution. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives fr...

7.5CVSS6.9AI score0.00318EPSS
Exploits2References2
Rows per page
Query Builder