TI-2022-09426 CVE-2022-25862 · GHSA-ph28-wwfj-fv7f
Prototype pollution in sds
Priority LOW 34
This affects the package sds from 0.0.0.
Sds Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Sds Project records in CISA KEVNo Sds Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Sds · all components
TI-2020-06139 CVE-2020-7618 · GHSA-cxm3-284p-qc4v
Prototype pollution in sds
Priority LOW 26
sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.