Thomaspoignant vulnerabilities
We track 1 vulnerability in Thomaspoignant products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Thomaspoignant vulnerabilities
- 9.1 Critical severity
scim-patch: Improperly Controlled Modification of Object Prototype Attributes
`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`. After one such patch, `Object.prototype.someProp` is set pr