Read the docs

Set-value Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Set-value Project records in CISA KEV

No Set-value Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority MEDIUM 47

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02475 Published 2019-08-23 Partial fix · 2.0.1, 3.0.1 CWE-400
TI-2021-06132 CVE-2021-23440 · GHSA-4jqc-8m5r-9rpr

Prototype pollution in set-value

Priority MEDIUM 46

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02206 Published 2021-09-12 Partial fix · 2.0.1, 4.0.1 +2 CWE-843
Open these records in search →