CVE-2022-25352
1 advisory.
npm/libnested CVE-2022-25352: critical 9.8, EPSS 2.06%
Prototype Pollution in libnested
Action: Upgrade libnested to 1.5.2 or later.
npm i libnested@1.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.2 | - |
Fixed versions
| 1.5.2 |
Sources
- osv: GHSA-x5m8-2r8v-8f97
- https://nvd.nist.gov/vuln/detail/CVE-2022-25352
- https://github.com/dominictarr/libnested/commit/c1129865d75fbe52b5a4f755ad3110ca5420f2e1
- https://github.com/dominictarr/libnested
- https://github.com/dominictarr/libnested/blob/master/index.js%23L22
- https://snyk.io/vuln/SNYK-JS-LIBNESTED-2342117
CVE-2022-25352 · published · modified · JSON