Security Vulnerabilities - CVEs Published In 2020
All versions of package confucious are vulnerable to Prototype Pollution via the set function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
CVSS Score
9.8
EPSS Score
0.02
Published
2020-09-01
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
CVSS Score
9.8
EPSS Score
0.028
Published
2020-09-01
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
CVSS Score
9.8
EPSS Score
0.032
Published
2020-09-01
All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.
CVSS Score
9.8
EPSS Score
0.019
Published
2020-09-01