Underscore-keypath vulnerabilities
We track 1 vulnerability in Underscore-keypath products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Underscore-keypath vulnerabilities
- 7.5 High severity
underscore-keypath: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty() function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments l