Lucene search
+L

6 matches found

OSV
OSV
•added 2022/05/14 12:01 a.m.•55 views

GHSA-PH28-WWFJ-FV7F Prototype Pollution in sds

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS6.4AI score0.00737EPSS
SaveExploits1References5
NVD
NVD
•added 2022/05/13 8:15 p.m.•31 views

CVE-2022-25862

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS0.00737EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/13 8:15 p.m.•19 views

CVE-2022-25862

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS5.8AI score0.00737EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/05/13 8:05 p.m.•52 views

CVE-2022-25862 Prototype Pollution

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

4CVSS6.4AI score0.00737EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/13 8:00 p.m.•9 views

CVE-2022-25862

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives from an incomplete fix to CVE-2020-7618...

7.5CVSS6.4AI score0.01143EPSS
SaveExploits2References3
Snyk
Snyk
•added 2022/01/27 2:40 p.m.•9 views

Prototype Pollution

Overview sds is a structured data search package. Affected versions of this package are vulnerable to Prototype Pollution. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. Note: This vulnerability derives fr...

7.5CVSS6.9AI score0.01143EPSS
SaveExploits2References2
Rows per page
Query Builder