Skip to content
Sign in
4.0 Medium

CVE-2022-25862 This affects the package sds from 0.0.0

Description

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-7618](https://security.snyk.io/vuln/SNYK-JS-SDS-564123)

Affected products and versions

Product Affected versions Fixed in
sds 0.0 0.0.0 → latest No fix stated

Other CVEs of sds

The 2 CVEs of sds →
CVE-2020-7618 sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying… Not rated
Track this CVE