Ntharim vulnerabilities
We track 2 vulnerabilities in Ntharim products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score
Latest Ntharim vulnerabilities
- 8.2 High severity
dot-access: Improperly Controlled Modification of Object Prototype Attributes
dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set(). Attackers controlling the path, such as through user-supplied field names, can use __proto__ seg
- 9.8 Critical severity
dot-access: Improper Control of Generation of Code
dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.con