Lucene search
+L

1 matches found

CVE
CVE
added 2022/02/04 8:0 p.m.109 views

CVE-2021-23497

The CVE-2021-23497 entry affects the package @strikeentco/set prior to 1.0.2. The vulnerability arises from an incomplete fix and enables Prototype Pollution, leading to a Denial of Service and may enable Remote Code Execution. Affected code paths include unsafe recursive merges and path-based pr...

9.8CVSS8.9AI score0.03734EPSS
Save