Vendor/product archive

set-value_project / set-value CVEs

Beta · best-effort

2 CVEs tagged to set-value_project / set-value — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to set-value_project vendor archive

CVE-2021-23440

Published Sep 12, 2021

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the pat…

CVSS 7.3 · High

Vendor/product tagsBeta · best-effort

CVE-2019-10747

Published Aug 23, 2019

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1