Lutils Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lutils Project records in CISA KEV

No Lutils Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Lutils · all components

TI-2021-06089 CVE-2021-23396 · GHSA-3r8w-mphv-2f3f

MEDIUM 44

All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01003 Published 2021-06-17 No fix listed CWE-1321