Read the docs

Deep-get-set Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Deep-get-set Project records in CISA KEV

No Deep-get-set Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2020-06235 CVE-2020-7715 · GHSA-85cp-p426-42f5

Prototype pollution in deep-get-set

Priority MEDIUM 46

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01981 Published 2020-09-01 Fixed in 1.1.1 CWE-1321
TI-2022-05623 CVE-2022-21231 · GHSA-mjjj-6p43-vhhv

Prototype pollution in deep-get-set

Priority MEDIUM 45

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01431 Published 2022-06-24 No fix listed CWE-1321
Open these records in search →