Vulnerabilities > Skratchdot
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-02-04 | CVE-2021-23507 | Unspecified vulnerability in Skratchdot Object-Path-Set The package object-path-set before 1.0.2 are vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. | 9.8 |