Skip to main content

Js Data

2 CVEs product

Monthly

CVE-2021-23574 npm CRITICAL POC PATCH Act Now

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Prototype Pollution Information Disclosure Js Data
NVD GitHub
CVSS 3.1
9.8
EPSS
2.1%
CVE-2020-28442 npm CRITICAL POC PATCH Act Now

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Js Data
NVD GitHub
CVSS 3.1
9.8
EPSS
2.0%
EPSS 2% CVSS 9.8
CRITICAL POC PATCH Act Now

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Prototype Pollution Information Disclosure Js Data
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL POC PATCH Act Now

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Js Data
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy