skratchdot/object-path-set

skratchdot/object-path-set

GitHubGitHub
GitHubgithub.com
Releases5
Frequency1 year 10 months
Last Release
Stars5
set values in javascript objects by specifying a path
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-23507↗
7.5 HIGH7.5 HIGH

The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908