Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Js-data Clear all filters
TI-2021-06167 CVE-2021-23574 · GHSA-c6h4-gc3f-hgjq

Prototype pollution in js-data

Priority MEDIUM 46

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02168 Published 2021-12-24 No fix listed CWE-1321
TI-2020-17259 CVE-2020-28442 · GHSA-mqgv-67vx-g4m5

Prototype pollution in js-data

Priority MEDIUM 46

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01983 Published 2020-12-15 Fixed in 3.0.10 CWE-1321