Description
The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
Remediation
References
https://github.com/Irrelon/irrelon-path/commit/8a126b160c1a854ae511659c111413ad9910ebe3
https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598672
https://snyk.io/vuln/SNYK-JS-IRRELONPATH-598673
Related Vulnerabilities
CVE-2020-26288 Vulnerability in npm package parse-server
CVE-2022-29647 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2023-47326 Vulnerability in maven package org.silverpeas.core:silverpeas-core
CVE-2015-7294 Vulnerability in npm package ldapauth-fork
CVE-2018-11775 Vulnerability in maven package org.apache.activemq:activemq-client