Skip to content
OpenAdvisories
High · 7.5 CVE-2021-23497 EUVD-2022-0787GHSA-39qv-prmh-x37fSNYK-JS-STRIKEENTCOSET-2385945

Prototype Pollution

Published Feb 4, 2022 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821

Affected products

VendorProductAffectedFixed
— @strikeentco/set unspecified – < 1.0.2 1.0.2

Affected packages

EcosystemPackageAffectedFixedRecord
npm @strikeentco/set < 1.0.2 1.0.2 GHSA-39qv-prmh-x37f

References