object-path

2 results · Clear filters · Feed

• High 7.5
  CVE-2021-3805

  Prototype Pollution in mariocasciaro/object-path

  object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

  mariocasciaro mariocasciaro/object-path node-object-path object-path Debian Ubuntu npm
  Sep 17, 2021
• High 7.7
  CVE-2020-15256

  Prototype pollution in object-path

  A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode (if version >= 0.11.0 is used), which has to be explicitly enabled by creating a new i…

  mariocasciaro object-path object-path node-object-path Debian Ubuntu npm
  Oct 19, 2020