Js-data - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2021-12-24.

Products

• Js-data - 2 CVEs

Newest CVEs of Js-data

• CVE-2021-23574 - CVSS 9.8 (critical), 2021-12-24: All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of…
• CVE-2020-28442 - CVSS 9.8 (critical), 2020-12-15: All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.