CVE-2022-25352

CVE-2022-25352 affects the libnested package prior to version 1.5.2. The vulnerability is a prototype pollution flaw in the set function of index.js, stemming from an incomplete fix related to CVE-2020-28283. Impact is described as prototype contamination with potential high-severity effects; aff...

CVE-2020-28283

CVE-2020-28283 affects the libnested package; versions before 1.5.2 are vulnerable to Prototype Pollution through the set function in index.js, enabling denial of service and potentially remote code execution. The issue stems from an incomplete fix and is addressed by upgrading libnested to 1.5.2...