Object-path-set (Skratchdot) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-02-04. Vendor: Skratchdot.

CVEs of Object-path-set

• CVE-2021-23507 - CVSS 9.8 (critical), 2022-02-04: The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes…