Description

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

Remediation

References

https://snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676

Related Vulnerabilities

CVE-2022-22947 Vulnerability in maven package org.springframework.cloud:spring-cloud-gateway

CVE-2021-43306 Vulnerability in maven package org.webjars:jquery-validation

CVE-2020-28502 Vulnerability in maven package org.webjars.npm:xmlhttprequest-ssl

CVE-2021-3918 Vulnerability in npm package json-schema

CVE-2019-12043 Vulnerability in npm package remarkable

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory CWE-1321