Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Springtree Subscribe
Filtered by product Madlib-object-utils
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7701 1 Springtree 1 Madlib-object-utils 2022-12-02 7.5 HIGH 9.8 CRITICAL
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.
CVE-2022-24279 1 Springtree 1 Madlib-object-utils 2022-04-25 5.0 MEDIUM 7.5 HIGH
The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix of [CVE-2020-7701](https://security.snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676)