CVE-2026-45325
1 advisory.
npm/@tmlmobilidade/utils CVE-2026-45325: high 8.2, EPSS 0.46%
@tmlmobilidade/utils has prototype pollution in its setValueAtPath
Action: Upgrade @tmlmobilidade/utils to 20260509.0340.15 or later.
npm i @tmlmobilidade/utils@20260509.0340.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20260509.0340.15 | - |
Fixed versions
| 20260509.0340.15 |
Sources
- osv: GHSA-cmxg-94mg-jq94
- https://github.com/tmlmobilidade/go/security/advisories/GHSA-cmxg-94mg-jq94
- https://github.com/tmlmobilidade/go/commit/b10505baa7ba0701f830a05f3007c0a6bdd00eb7
- https://github.com/tmlmobilidade/go
- https://github.com/tmlmobilidade/go/blob/prd/packages/utils/src/generic/value-at-path.ts
CVE-2026-45325 · published · modified · JSON