Описание
Prototype pollution in set-in
Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.
Пакеты
Наименование
set-in
npm
Затронутые версииВерсия исправления
< 2.0.1
2.0.1
Связанные уязвимости
CVSS3: 9.8
nvd
около 5 лет назад
Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.