Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

TI-2021-07923 CVE-2021-25913 · GHSA-6rv4-4qv6-88g2

Prototype pollution in set-or-get

Priority MEDIUM 49

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04378 Published 2021-02-08 Fixed in 1.2.11 CWE-1321