Prototype Pollution in madlib-object-utils

CRÍTICO 9.8CVE-2020-7701 · GHSA-jvf5-q4h5-2jmj · SNYK-JS-MADLIBOBJECTUTILS-598676 · Published 14/08/2020 · updated 17/06/2026

En resumen

CVE-2020-7701 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a madlib-object-utils (springtree), madlib-object-utils.
Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 80.9% de las vulnerabilidades.
Solución: actualizar a 0.1.7 o posterior.

Package	Affected versions	Patched versions
madlib-object-utils springtree	`< 0.1.7`	`0.1.7`
madlib-object-utils npm	`< 0.1.7`	`0.1.7`

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

NVD description

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.