Underscore-keypath Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Underscore-keypath Project records in CISA KEV

No Underscore-keypath Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2023-11363 CVE-2023-26139 · GHSA-gpvc-mx6g-cchv

MEDIUM 41

Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty() function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00886 Published 2023-08-01 No fix listed CWE-1321