Purl Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Purl Project records in CISA KEV

No Purl Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Purl 1 record MEDIUM

Records

1 record

TI-2021-03392 CVE-2021-20089 · GHSA-fc5x-mj45-vx78

Prototype pollution in purl

MEDIUM 41

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in purl 2.3.2 allows a malicious user to inject properties into Object.prototype.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01606 Published 2021-04-23 No fix listed CWE-1321

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0