Object-path Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Object-path Project records in CISA KEV

No Object-path Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-12028 CVE-2020-15256 · GHSA-cwx2-736x-mf6w

MEDIUM 45

A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01546 Published 2020-10-19 Fixed in 0.11.5 CWE-20

TI-2021-06126 CVE-2021-23434 · GHSA-v39p-96qg-c8rf

MEDIUM 41

This affects the package object-path before 0.11.6.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01902 Published 2021-08-27 Partial fix · 0.11.6 CWE-843

TI-2021-02736 CVE-2021-3805 · GHSA-8v63-cqqc-6r2c

LOW 37

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0204 Published 2021-09-17 Partial fix · 0.11.8 CWE-1321