Skip to content
OpenAdvisories

Package · npm

mpath

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.6
    CVE-2021-23438

    Prototype Pollution

    This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 if parts[i] is ['__proto__']. This is because the method that…

    mpath npm
  • High 7.5
    CVE-2018-16490

    Prototype Pollution in mpath

    A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

    HackerOne mpath mpath npm