Read the docs

Mpath Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mpath Project records in CISA KEV

No Mpath Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2021-06130 CVE-2021-23438 · GHSA-p92x-r36w-9395

Prototype pollution in mpath

Priority MEDIUM 46

This affects the package mpath before 0.8.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01723 Published 2021-09-01 Fixed in 0.8.4 CWE-843
Priority LOW 35

A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01101 Published 2019-02-01 Partial fix · 0.5.1 CWE-400
Open these records in search →