Read the docs

Confinit Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Confinit Project records in CISA KEV

No Confinit Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Confinit 1 record LOW

Records

1 record in Confinit · all components

TI-2020-06159 CVE-2020-7638 · GHSA-jgpq-g82g-6c39

Prototype pollution in confinit

Priority LOW 26

confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01022 Published 2020-04-06 Fixed in 0.4.0 CWE-1321
Open these records in search →