Description
All versions of package node-oojs up to and including version 1.4.0 are vulnerable to Prototype Pollution via the setPath function.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.4.0
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in node-oojs and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution in safe-object2 - CVE-2020-7726
- Prototype Pollution in lodash - lodash - GHSA-p6mc-m468-83gw - CVE-2020-8203
- eivindfjeldstad-dot contains prototype pollution vulnerability - CVE-2020-7639
- keyget vulnerable to prototype pollution - CVE-2020-28272
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023


