Read the docs

Js-data

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Js-data records in CISA KEV

No Js-data vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Js-data 2 records MEDIUM

Records

2 records in Js-data · all components

TI-2021-06167 CVE-2021-23574 · GHSA-c6h4-gc3f-hgjq

Prototype pollution in js-data

Priority MEDIUM 46

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02168 Published 2021-12-24 No fix listed CWE-1321
TI-2020-17259 CVE-2020-28442 · GHSA-mqgv-67vx-g4m5

Prototype pollution in js-data

Priority MEDIUM 46

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01983 Published 2020-12-15 Fixed in 3.0.10 CWE-1321
Open these records in search →