Object-path Project - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2021-09-17.

Products

• Object-path - 3 CVEs

Newest CVEs of Object-path Project

• CVE-2021-3805 - CVSS 7.5 (high), 2021-09-17: object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
• CVE-2021-23434 - CVSS 8.6 (high), 2021-08-27: This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the…
• CVE-2020-15256 - CVSS 9.8 (critical), 2020-10-19: A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the…