Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Mpath Project records in CISA KEVNo Mpath Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
This affects the package mpath before 0.8.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01723 · Published 2021-09-01 · Fixed in 0.8.4 CWE-843
Priority LOW 35
A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01101 · Published 2019-02-01 · Partial fix · 0.5.1 CWE-400
Open these records in search →