Prototype Pollution

2022-07-2603:44:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.8%

JSON

set-deep-prop is vulnerable to prototype pollution. The vulnerability exist in the setDeepProp function in set-deep-prop.js which allows remote attackers to inject malicious payloads.

CPENameOperatorVersion
set-deep-propeq1.0.0
set-deep-propeq1.0.0

CPE	Name	Operator	Version
	set-deep-prop	eq	1.0.0
	set-deep-prop	eq	1.0.0

References

github.com/advisories/GHSA-v42q-78w8-8fcc

github.com/mmckelvy/set-deep-prop/blob/master/set-deep-prop.js#L20

0.003 Low

EPSS

Percentile

68.8%

JSON

Related for VERACODE:36492