Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: airjp73 Clear all filters
TI-2026-76503 CVE-2026-112309 · GHSA-ffhp-5372-ccmj

@rvf/set-get setPath prototype pollution enables denial of service

Priority MEDIUM 44

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00395 Published 2026-10-19 Fixed in 7.0.4 CWE-1321