Search vulnerabilities

Results 2

Export CSV
CVE-2021-23574

Prototype Pollution

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of [CVE-2020-28442](https://snyk.io/vuln/SNYK-JS-JSDATA-1023655).

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Products
CVE-2020-28442

Prototype Pollution

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products