Springtree Madlib-Object-Utils
2 CVEs affecting Springtree Madlib-Object-Utils. Latest disclosed: 2022-04-15. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7701 | Critical | 9.8 | 2020-08-14 | madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue. |
CVE-2022-24279 | High | 7.5 | 2022-04-15 | The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes… |