Skip to content
Sign in
7.5 High

CVE-2022-25352 The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js

Description

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. **Note:** This vulnerability derives from an incomplete fix for [CVE-2020-28283](https://security.snyk.io/vuln/SNYK-JS-LIBNESTED-1054930)

Affected products and versions

Product Affected versions Fixed in
libnested 1.5 earliest → < 1.5.2 1.5.2

Other CVEs of libnested

The 2 CVEs of libnested →
CVE-2020-28283 Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of… Not rated
Track this CVE