Aller au contenu
Se connecter
7.5 Élevée

CVE-2022-25352 The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js

Description

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. **Note:** This vulnerability derives from an incomplete fix for [CVE-2020-28283](https://security.snyk.io/vuln/SNYK-JS-LIBNESTED-1054930)

Produits et versions touchés

Produit Versions touchées Corrigé en
libnested 1.5 premières → < 1.5.2 1.5.2

Autres CVE de libnested

Les 2 CVE de libnested →
CVE-2020-28283 Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of… Non notée
Suivre cette CVE