Skip to main content

Set Value

2 CVEs product

Monthly

CVE-2021-23440 Sep 12, 13:15 LIB CRITICAL POC PATCH Act Now

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Memory Corruption Oracle Communications Cloud Native Core Policy Set Value
NVD GitHub
CVSS 3.1
9.8
EPSS
2.5%
CVE-2019-10747 Aug 23, 17:15 npm CRITICAL POC PATCH Act Now

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Set Value
NVD
CVSS 3.1
9.8
EPSS
2.5%
EPSS 2% CVSS 9.8
CRITICAL POC PATCH Act Now

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Memory Corruption Oracle +2
NVD GitHub
EPSS 2% CVSS 9.8
CRITICAL POC PATCH Act Now

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Set Value
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy