Madlib-object-utils@* Security Vulnerabilities and Issues — Madlib-object-utils@* CVE List

Lucene search

SpringtreeMadlib-object-utils*

2 matches found

CVE•added 2022/04/15 8:15 p.m.•56 views

CVE-2022-24279

The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-7701

7.5CVSS8.5AI score0.01104EPSS

CVE•added 2020/08/14 3:15 p.m.•33 views

CVE-2020-7701

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

9.8CVSS8.4AI score0.01104EPSS