Vendor/product archive

mpath_project / mpath CVEs

Beta · best-effort

2 CVEs tagged to mpath_project / mpath — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to mpath_project vendor archive

CVE-2021-23438

Published Sep 1, 2021

This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i])…

CVSS 5.6 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-16490

Published Feb 1, 2019

A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1