Prototype Pollution in madlib-object-utils

CRÍTICO 9.8CVE-2020-7701 · GHSA-jvf5-q4h5-2jmj · SNYK-JS-MADLIBOBJECTUTILS-598676 · Published 14/08/2020 · updated 17/06/2026

Em resumo

CVE-2020-7701 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta madlib-object-utils (springtree), madlib-object-utils.
Chance de exploração nos próximos 30 dias (EPSS): 2.0%, maior que 80.9% das vulnerabilidades.
Correção: atualize para 0.1.7 ou posterior.

Package	Affected versions	Patched versions
madlib-object-utils springtree	`< 0.1.7`	`0.1.7`
madlib-object-utils npm	`< 0.1.7`	`0.1.7`

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

NVD description

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.