| Package | Affected versions | Patched versions |
|---|---|---|
| forge | < 0.10.0 | 0.10.0 |
| node-forge | < 0.10.0 | 0.10.0 |
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: version 0.10.0 is a breaking change removing the vulnerable functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free