CyberSecBulletin

Set-in vulnerabilities

We track 1 vulnerability in Set-in products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2022.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Set-in vulnerabilities

  • 9.8 Critical severity

    set-in: Improperly Controlled Modification of Object Prototype Attributes

    CVE-2022-25354Set-inEPSS 1.93%

    The package set-in before 2.0.3 are vulnerable to Prototype Pollution via the setIn method, as it allows an attacker to merge object prototypes into it. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-28273](https://security.snyk.io/vu