Skip to content
OpenAdvisories

Package · npm

tree-kit

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-38894

    tree-kit Prototype Pollution vulnerability

    A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.

    tree-kit npm