CVE-2021-23434
1 advisory.
npm/object-path CVE-2021-23434: medium 5.6, EPSS 1.90%
Prototype Pollution in object-path
Action: Upgrade object-path to 0.11.6 or later.
npm i object-path@0.11.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.6 | - |
Fixed versions
| 0.11.6 |
Sources
- osv: GHSA-v39p-96qg-c8rf
- https://nvd.nist.gov/vuln/detail/CVE-2021-23434
- https://github.com/mariocasciaro/object-path/commit/7bdf4abefd102d16c163d633e8994ef154cab9eb
- https://github.com/mariocasciaro/object-path
- https://github.com/mariocasciaro/object-path#0116
- https://github.com/mariocasciaro/object-path%230116
- https://lists.debian.org/debian-lts-announce/2023/01/msg00031.html
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1570423
- https://snyk.io/vuln/SNYK-JS-OBJECTPATH-1569453
CVE-2021-23434 · published · modified · JSON