CVE-2024-38985
2 advisories.
npm/depath CVE-2024-38985: high, EPSS 0.81%
depath and cool-path vulnerable to Prototype Pollution via `set()` Method
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4h4x-4m75-47j4
- https://nvd.nist.gov/vuln/detail/CVE-2024-38985
- https://github.com/janryWang/depath/issues/11
- https://gist.github.com/mestrtee/32c0a48023036e51918f6a098f21953d
- https://github.com/janryWang/depath
CVE-2024-38985 · published · modified · JSON
npm/cool-path CVE-2024-38985: high, EPSS 0.81%
depath and cool-path vulnerable to Prototype Pollution via `set()` Method
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4h4x-4m75-47j4#npm/cool-path
- https://nvd.nist.gov/vuln/detail/CVE-2024-38985
- https://github.com/janryWang/depath/issues/11
- https://gist.github.com/mestrtee/32c0a48023036e51918f6a098f21953d
- https://github.com/janryWang/depath
CVE-2024-38985 · published · modified · JSON