Vulnerabilities (CVE)

Filtered by vendor Irrelon Subscribe
Filtered by product Irrelon-path
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7708 1 Irrelon 2 \@irrelon\/path, Irrelon-path 2024-11-21 7.5 HIGH 9.8 CRITICAL
The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.