Lucene search

Libnested Security Vulnerabilities

cve

CVE-2020-28283

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution.

9.8CVSS

9.4AI Score

0.012EPSS

2020-12-29 06:15 PM

cve

CVE-2022-25352

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283

9.8CVSS

9.3AI Score

0.012EPSS

2022-03-17 12:15 PM