Read the docs

Springtree

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Springtree records in CISA KEV

No Springtree vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Madlib-object-utils 2 records MEDIUM

Records

2 records in Madlib-object-utils · all components

TI-2020-06221 CVE-2020-7701 · GHSA-jvf5-q4h5-2jmj

Prototype pollution in madlib-object-utils

Priority MEDIUM 46

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01999 Published 2020-08-14 Fixed in 0.1.7 CWE-1321
TI-2022-08162 CVE-2022-24279 · GHSA-pfv6-prqm-85q8

Prototype pollution in madlib-object-utils

Priority LOW 36

The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01339 Published 2022-04-15 Fixed in 0.1.8 CWE-1321
Open these records in search →