Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Deep-get-set Project Component: Deep-get-set Clear all filters
TI-2022-05623 CVE-2022-21231 · GHSA-mjjj-6p43-vhhv

Prototype pollution in deep-get-set

Priority MEDIUM 45

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01431 Published 2022-06-24 No fix listed CWE-1321
TI-2020-06235 CVE-2020-7715 · GHSA-85cp-p426-42f5

Prototype pollution in deep-get-set

Priority MEDIUM 46

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01981 Published 2020-09-01 Fixed in 1.1.1 CWE-1321