Lucene search

K
osvGoogleOSV:GHSA-92XJ-MQP7-VMCJ
HistorySep 14, 2020 - 9:42 p.m.

Prototype Pollution in node-forge

2020-09-1421:42:09
Google
osv.dev
8

0.002 Low

EPSS

Percentile

59.1%

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: version 0.10.0 is a breaking change removing the vulnerable functions.

CPENameOperatorVersion
node-forgelt0.10.0