GHSA-j7cg-h9v9-6vqpCriticalCVSS 9.8

Prototype Pollution in irrelon-path and @irrelon/path

Published
May 6, 2021
Last Modified
September 7, 2023

🔗 CVE IDs covered (1)

CVE-2020-7708 →

📋 Description

The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.

🎯 Affected products2

  • npm/irrelon-path:< 4.7.0
  • npm/@irrelon/path:< 4.7.0

🔗 References (5)