strikeentco/set

Releases0

Stars3

Set nested values on an object using a dot path or custom separator

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-23497 ↗	Feb 4, 2022Friday, 4 February 2022, 20:15	7.5 HIGH	7.5 HIGH
This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821
CVE-2020-28267 ↗	Nov 10, 2020Tuesday, 10 November 2020, 16:15	7.5 HIGH	5 MEDIUM
Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.