2 matches found
CVE-2021-23558
The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. Note: This vulnerability derives from an incomplete fix in CVE-2020-7736
CVE-2020-7736
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.