Depath vulnerabilities

1 known vulnerability in Depath from Janrywang. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Depath: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-38985Mar 28, 2025Janrywang

  janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set() method at setIn (lib/index.js:90). This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecti