thomaspoignant

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

thomaspoignant records in CISA KEV

No thomaspoignant vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-35605 CVE-2026-48170 · GHSA-9m6g-wc8r-q59c

scimPatch vulnerable to prototype pollution via unfiltered keys in patch

HIGH 72

`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00403 Published 2026-08-07 Fixed in 0.9.1 CWE-1321

TI-2026-44253 CVE-2026-61834 · GHSA-2mhw-wcx5-v3xj

scim-patch: Mutation of Inherited Built-in Method Objects

MEDIUM 53

scim-patch is a library for applying SCIM patch operations.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00396 Published 2026-09-23 Fixed in 0.9.2 CWE-1321

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0