Skip to content
Sign in
7.5 High

CVE-2021-23574 All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions

Description

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of [CVE-2020-28442](https://snyk.io/vuln/SNYK-JS-JSDATA-1023655).

Affected products and versions

Product Affected versions Fixed in
js-data Versions not published

Other CVEs of js-data

The 2 CVEs of js-data →
CVE-2020-28442 All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function 7.5 High
Track this CVE