Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-25862

Prototype Pollution

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-7618](https://security.snyk.io/vuln/SNYK-JS-SDS-564123)

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Sds Project
Products
Sds
CVE-2020-7618

sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.

CVSS 3.1 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Sds Project
Products
Sds