CVE-2026-26021
1 advisory.
npm/set-in CVE-2026-26021: critical, EPSS 0.56%
set-in Affected by Prototype Pollution
Action: Upgrade set-in to 2.0.5 or later.
npm i set-in@2.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.1 | 2.0.5 | - |
Fixed versions
| 2.0.5 |
Sources
- osv: GHSA-2c4m-g7rx-63q7
- https://github.com/ahdinosaur/set-in/security/advisories/GHSA-2c4m-g7rx-63q7
- https://nvd.nist.gov/vuln/detail/CVE-2026-26021
- https://github.com/ahdinosaur/set-in/pull/6
- https://github.com/ahdinosaur/set-in/commit/34842cc02de3fd65d6f8bd0b268347e7b390125b
- https://github.com/ahdinosaur/set-in/commit/6bad255961d379e4b1f5fbc52ef9dc8420816f24
- https://github.com/ahdinosaur/set-in/commit/b8e1dabfdbd35c8d604b6324e01d03f280256c3d
- https://github.com/ahdinosaur/set-in/commit/d87c1a09fa2edb55cd76440a67d83d1cb828df11
- https://github.com/ahdinosaur/set-in
CVE-2026-26021 · published · modified · JSON