Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2021-06151 CVE-2021-23497 · GHSA-39qv-prmh-x37f

Prototype pollution in @strikeentco/set

Priority MEDIUM 48

This affects the package @strikeentco/set before 1.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03734 Published 2022-02-04 Fixed in 1.0.2 CWE-1321
TI-2020-17161 CVE-2020-28267 · GHSA-wwg2-2crq-6grr

Prototype pollution in @strikeentco/set

Priority LOW 37

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02291 Published 2020-11-10 Fixed in 1.0.1 CWE-1321