Mpath Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2021-09-01.

Products

• Mpath - 2 CVEs

Newest CVEs of Mpath Project

• CVE-2021-23438 - CVSS 9.8 (critical), 2021-09-01: This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition…
• CVE-2018-16490 - CVSS 7.5 (high), 2019-02-01: A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.