ntharim

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ntharim records in CISA KEV

No ntharim vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-69719 CVE-2026-107700

Code injection in dot-access get() lets remote attackers run commands

HIGH 81

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get().

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00613 Published 2026-10-08 No fix listed CWE-94

TI-2026-69720 CVE-2026-107701

Prototype pollution in dot-access via set() path argument

MEDIUM 44

dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set().

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00325 Published 2026-10-08 No fix listed CWE-1321

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0