Prototype Pollution in madlib-object-utils

높음 7.5CVE-2022-24279 · GHSA-pfv6-prqm-85q8 · SNYK-JS-MADLIBOBJECTUTILS-2388572 · Published 15/04/2022 · updated 17/06/2026

요약

CVE-2022-24279은(는) madlib-object-utils (springtree), madlib-object-utils에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.3%, 전체 취약점의 71.4%보다 높음.
조치: 0.1.8 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
madlib-object-utils springtree	`< 0.1.8`	`0.1.8`
madlib-object-utils npm	`< 0.1.8`	`0.1.8`

Description

The package madlib-object-utils before version 0.1.8 is vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-7701

NVD description

The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix of [CVE-2020-7701](https://security.snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676)

References

nvd.nist.gov/vuln/detail/CVE-2022-24279 · ADVISORY
Qwerios/madlib-object-utils commit 8d5d54c · WEB
Qwerios/madlib-object-utils · PACKAGE
snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-2388572 · WEB

madlib-object-utils의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

madlib-object-utils

springtree

< 0.1.8

0.1.8

madlib-object-utils

npm

< 0.1.8

0.1.8

Description

NVD description