Prototype Pollution in madlib-object-utils

CRITICO 9.8CVE-2020-7701 · GHSA-jvf5-q4h5-2jmj · SNYK-JS-MADLIBOBJECTUTILS-598676 · Published 14/08/2020 · updated 17/06/2026

In breve

CVE-2020-7701 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda madlib-object-utils (springtree), madlib-object-utils.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 80.8% delle vulnerabilità.
Correzione: aggiornare a 0.1.7 o successiva.

Package	Affected versions	Patched versions
madlib-object-utils springtree	`< 0.1.7`	`0.1.7`
madlib-object-utils npm	`< 0.1.7`	`0.1.7`

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

NVD description

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.