CVE-2021-23497

Published February 4th, 2022

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821

strikeentco/set

Set nested values on an object using a dot path or custom separator

GitHub