Object Path Project

CVE-2021-3805 Sep 17, 06:15 npm HIGH POC PATCH This Week

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2021-23434 Aug 27, 17:15 npm HIGH POC PATCH This Week

This affects the package object-path before 0.11.6. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2020-15256 Oct 19, 22:15 npm CRITICAL PATCH Act Now

A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.