GitHub Advisoryadvisory · npm

GHSA-v42q-78w8-8fcc set-deep-prop Prototype Pollution

CRITICAL Published 2022-07-26 Modified 2022-08-06 Official page ↗

Aliases: CVE-2021-23373
Ecosystem: npm
Packages: set-deep-prop
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-1321
Reviewed: 2022-08-06

Affected packages

• npm set-deep-prop: <= 1.0.0 (no fix yet)

Description

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality.

Related

Alias · CVE (1)

CVE-2021-23373 All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality. vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References