EUVD-2022-6418

Malicious code in bioql PyPI...

set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

GHSA-V42Q-78W8-8FCC set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

Design/Logic Flaw

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373 Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

The CVE-2021-23373 entry concerns set-deep-prop, where the main functionality is vulnerable to Prototype Pollution. Multiple connected sources confirm the vulnerability in set-deep-prop (e.g., GHSA, Veracode, Snyk) and describe how an attacker can pollute Object.prototype via the library’s setDee...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

set-deep-prop 安全漏洞

set-deep-prop is a tool for setting the values of deeply nested objects and arrays. A security vulnerability exists in set-deep-prop, which stems from the vulnerability of this package to prototype contamination...

PT-2022-9395 · Unknown · Set-Deep-Prop

Name of the Vulnerable Software and Affected Versions: set-deep-prop affected versions not specified Description: The issue affects the main functionality of the package, allowing for Prototype Pollution. Recommendations: At the moment, there is no information about a newer version that contains ...

Prototype Pollution

Overview set-deep-prop is a Set the value of a deeply nested object or array Affected versions of this package are vulnerable to Prototype Pollution via the main functionality. PoC const setDeepProp = require'set-deep-prop'; setDeepProp,'proto', 'x', 'polluted'; console.log.a; // polluted Details...