Skip to content
OpenAdvisories

Package · npm

dynamoose

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.2
    CVE-2021-21304

    Prototype Pollution in Dynamoose

    Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout th…

    dynamoose dynamoose dynamoose npm