CVE-2021-23497

The CVE-2021-23497 entry affects the package @strikeentco/set prior to 1.0.2. The vulnerability arises from an incomplete fix and enables Prototype Pollution, leading to a Denial of Service and may enable Remote Code Execution. Affected code paths include unsafe recursive merges and path-based pr...

CVE-2020-28267

CVE-2020-28267 concerns a prototype pollution vulnerability in the package @strikeentco/set version 1.0.0. The available connected documents describe the flaw as prototype pollution that allows an attacker to cause a denial of service and may lead to remote code execution. No explicit exploitatio...