Read the docs

Json8-merge-patch Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Json8-merge-patch Project records in CISA KEV

No Json8-merge-patch Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Json8-merge-patch 1 record LOW

Records

1 record in Json8-merge-patch · all components

TI-2020-06685 CVE-2020-8268 · GHSA-8v9x-9xqg-r8mr

Improper input validation in json8-merge-patch

Priority LOW 35

Prototype pollution vulnerability in json8-merge-patch npm package < 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01293 Published 2020-11-09 Fixed in 1.0.3 CWE-471
Open these records in search →