Lucene search
GoogleOSV:GHSA-6956-83FG-5WC5HistoryMar 18, 2022 - 12:01 a.m.
Prototype Pollution in set-in
2022-03-1800:01:11
Google
osv.dev
16
prototype pollution
set-in package
cve-2020-28273
EPSS
0.079
Percentile
94.3%
The package set-in before 2.0.3 is vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-28273
Related
cvelist
cvelist
CVE-2022-25354 Prototype Pollution
2022-03-17 11:20:56
CVE-2020-28273
2020-12-02 14:34:07
github
github
Prototype Pollution in set-in
2022-03-18 00:01:11
Prototype pollution in set-in
2021-03-19 21:01:46
prion
prion
Design/Logic Flaw
2022-03-17 12:15:00
Remote code execution
2020-12-02 15:15:00
osv
osv
CVE-2022-25354
2022-03-17 12:15:08
CVE-2020-28273
2020-12-02 15:15:12
Prototype pollution in set-in
2021-03-19 21:01:46
nvd
nvd
CVE-2022-25354
2022-03-17 12:15:08
CVE-2020-28273
2020-12-02 15:15:12
cve
cve
CVE-2022-25354
2022-03-17 12:15:08
CVE-2020-28273
2020-12-02 15:15:12
veracode
veracode
Prototype Pollution
2020-12-03 03:10:37
Prototype Pollution
2022-03-18 09:39:55
nodejs
nodejs
Prototype Pollution
2021-03-19 21:06:46
checkpoint_advisories
checkpoint_advisories