Thomaspoignant Scim-Patch
2 CVEs affecting Thomaspoignant Scim-Patch. Latest disclosed: 2026-09-23. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48170 | Critical | 9.1 | 2026-08-07 | `scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object co… |
CVE-2026-61834 | Medium | 4.3 | 2026-09-23 | scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership… |