Lucene search
+L
SkratchdotObject-path-set

1 matches found

CVE
CVE
added 2022/02/04 8:5 p.m.84 views

CVE-2021-23507

CVE-2021-23507 affects the npm package object-path-set . Versions before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, enabling an attacker to merge properties into object prototypes. Impact can include denial of service or potential remote code execution, per the provided r...

9.8CVSS8.6AI score0.02125EPSS
Save