CVE-2026-48170
1 advisory.
npm/scim-patch CVE-2026-48170: critical 9.1, EPSS 0.40%
scimPatch vulnerable to prototype pollution via unfiltered keys in patch
Action: Upgrade scim-patch to 0.9.1 or later.
npm i scim-patch@0.9.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.1 | - |
Fixed versions
| 0.9.1 |
Sources
- osv: GHSA-9m6g-wc8r-q59c
- https://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-9m6g-wc8r-q59c
- https://github.com/thomaspoignant/scim-patch/commit/260f9cd2ac5ceac3976978850bb47dcb391720f6
- https://github.com/thomaspoignant/scim-patch
CVE-2026-48170 · published · modified · JSON