Description
Prototype pollution vulnerability in ‘set-object-value’ versions 0.0.0 through 0.0.5 allows an attacker to cause a denial of service and may lead to remote code execution.
Recommendation
Update the set-object-value package to the latest compatible version. Followings are version details:
- Affected version(s): < 0.0.6
- Patched version(s): 0.0.6
References
Could your website be exposed too?
SmartScanner can check your website for Prototype pollution in set-object-value and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype Pollution in madlib-object-utils - madlib-object-utils - CVE-2020-7701
- Prototype pollution vulnerability in 'deep-set - CVE-2020-28276
- Prototype pollution in set-in - set-in - CVE-2020-28273
- Prototype Pollution in lodash - lodash.set - CVE-2020-8203
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023