CVE-2021-25913

2021-02-0822:15:12

Google

osv.dev

7.6 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

84.9%

JSON

Prototype pollution vulnerability in ‘set-or-get’ version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution.

CPENameOperatorVersion
set-or-get.jseq1.2.9
set-or-get.jseq1.2.6
set-or-get.jseq1.2.5
set-or-get.jseq1.1.0
set-or-get.jseq1.2.2
set-or-get.jseq1.2.10
set-or-get.jseq1.2.3
set-or-get.jseq1.2.4
set-or-get.jseq1.2.8
set-or-get.jseq1.2.7

Name	Operator	Version
set-or-get.js	eq	1.2.9
set-or-get.js	eq	1.2.6
set-or-get.js	eq	1.2.5
set-or-get.js	eq	1.1.0
set-or-get.js	eq	1.2.2
set-or-get.js	eq	1.2.10
set-or-get.js	eq	1.2.3
set-or-get.js	eq	1.2.4
set-or-get.js	eq	1.2.8
set-or-get.js	eq	1.2.7