Airjp73 vulnerabilities
We track 2 vulnerabilities in Airjp73 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Airjp73 vulnerabilities
- 7.5 High severity
@rvf/set-get: Improperly Controlled Modification of Object Prototype Attributes
@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnP
- 8.2 High severity
rvf: Improperly Controlled Modification of Object Prototype Attributes
RVF (formerly Remix Validated Form) provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @rvf/set-get (used by @rvf/core to flatten incoming form data into a nested object) does not block the keys __pro