The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and _proto_ payloads.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packaging | May 4, 2022 | Aug 23, 2019 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-devel | Feb 17, 2021 | Aug 23, 2019 |
| Debian | — | Upgrade node-set-value | Jul 30, 2024 | Aug 23, 2019 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-packagingUpgrade npm | Feb 20, 2021 | Jun 20, 2019 |
| Redhat_linux | — | Upgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-docsUpgrade npmNo solution existsUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-packaging | Feb 17, 2021 | Aug 23, 2019 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 23, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub