set-get vulnerabilities

1 known vulnerability in set-get from @rvf. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  rvf: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-44483May 27, 2026Airjp73

  RVF (formerly Remix Validated Form) provides easy form validation and state management for React. From 6.0.0 to before 6.0.4 and 7.0.2, setPath in @rvf/set-get (used by @rvf/core to flatten incoming form data into a nested object) does not block the keys __pro