Read the docs

Skratchdot

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Skratchdot records in CISA KEV

No Skratchdot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Object-path-set 1 record MEDIUM

Records

1 record in Object-path-set · all components

TI-2021-06152 CVE-2021-23507 · GHSA-h6pr-c536-6rjg

Prototype pollution in object-path-set

Priority MEDIUM 46

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02125 Published 2022-02-04 Fixed in 1.0.2 CWE-1321
Open these records in search →