Search for packages
| purl | pkg:deb/debian/node-set-value@3.0.1-2%2Bdeb11u1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-cu35-t78a-wfcj | Prototype Pollution in set-value Versions of `set-value` prior to 3.0.1 or 2.0.1 are vulnerable to Prototype Pollution. The `set` function fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects. ## Recommendation If you are using `set-value` 3.x, upgrade to version 3.0.1 or later. If you are using `set-value` 2.x, upgrade to version 2.0.1 or later. |
CVE-2019-10747
GHSA-4g88-fppr-53pp |
| VCID-eq42-z92a-ffet | Access of Resource Using Incompatible Type (Type Confusion) This affects the package set-value A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays. |
CVE-2021-23440
GHSA-4jqc-8m5r-9rpr |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-01T23:41:09.991402+00:00 | Debian Importer | Fixing | VCID-cu35-t78a-wfcj | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-05-01T23:13:39.155597+00:00 | Debian Importer | Fixing | VCID-eq42-z92a-ffet | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |
| 2026-04-16T11:01:40.750496+00:00 | Debian Importer | Fixing | VCID-eq42-z92a-ffet | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:29:12.941172+00:00 | Debian Importer | Fixing | VCID-cu35-t78a-wfcj | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T07:29:10.459388+00:00 | Debian Importer | Fixing | VCID-eq42-z92a-ffet | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T18:19:35.253029+00:00 | Debian Importer | Fixing | VCID-cu35-t78a-wfcj | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:47:15.468296+00:00 | Debian Importer | Fixing | VCID-eq42-z92a-ffet | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:47:15.425312+00:00 | Debian Importer | Fixing | VCID-cu35-t78a-wfcj | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |