Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36141
HistoryJun 27, 2022 - 5:41 a.m.

Prototype Pollution

2022-06-2705:41:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.005 Low

EPSS

Percentile

77.0%

deep-get-set is vulnerable to prototype pollution. The vulnerability exists due to an incomplete fix of CVE-2020-7715, allowing an attacker to get control of value of “deep” and modify attributes such as __proto__, constructor and prototype. .

CPENameOperatorVersion
deep-get-seteq1.1.1
deep-get-seteq1.1.1

0.005 Low

EPSS

Percentile

77.0%