object-path

3 results · Feed

• High 7.5
  CVE-2021-3805

  Prototype Pollution in mariocasciaro/object-path

  object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

  mariocasciaro mariocasciaro/object-path object-path node-object-path Debian Ubuntu npm
  Sep 17, 2021
• Medium 5.6
  CVE-2021-23434

  Prototype Pollution

  This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the path parameter are arrays. In particular, the condition currentPath === '__proto__' returns false if…

  object-path node-object-path node-object-path Debian Ubuntu npm
  Aug 27, 2021
• High 7.7
  CVE-2020-15256

  Prototype pollution in object-path

  A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode (if version >= 0.11.0 is used), which has to be explicitly enabled by creating a new i…

  mariocasciaro object-path object-path node-object-path Debian Ubuntu npm
  Oct 19, 2020