Skip to content
OpenAdvisories

Package · npm

scim-patch

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    scim-patch: Mutation of Inherited Built-in Method Objects

    scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys …