Cached-Path-Relative Project Cached-Path-Relative
2 CVEs affecting Cached-Path-Relative Project Cached-Path-Relative. Latest disclosed: 2022-01-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16472 | High | 7.5 | 2018-11-06 | A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by a… |
CVE-2021-23518 | High | 7.3 | 2022-01-21 | The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in… |