Skip to content
OpenAdvisories

Package · npm

object-path-set

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    Prototype Pollution

    The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK…