Set-value Security Vulnerabilities and Issues — Set-value CVE List

Lucene search

Set-value ProjectSet-value

2 matches found

CVE•added 2019/08/23 5:15 p.m.•638 views

CVE-2019-10747

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and proto payloads.

9.8CVSS9.1AI score0.0014EPSS

Web

CVE•added 2021/09/12 1:15 p.m.•246 views

CVE-2021-23440

This affects the package set-value before =3.0.0

9.8CVSS8.2AI score0.0014EPSS