Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/js-data@3.0.10
purl pkg:npm/js-data@3.0.10
Next non-vulnerable version 3.0.11
Latest non-vulnerable version 3.0.11
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5ytj-hcs8-7ucd
Aliases:
CVE-2021-23574
GHSA-c6h4-gc3f-hgjq
Prototype Pollution in js-data
3.0.11
Affected by 0 other vulnerabilities.
4.0.0-beta.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-431f-dqzd-zbax Prototype Pollution in js-data CVE-2020-28442
GHSA-mqgv-67vx-g4m5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T17:54:45.473620+00:00 GitLab Importer Affected by VCID-5ytj-hcs8-7ucd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/js-data/CVE-2021-23574.yml 38.6.0
2026-06-12T08:15:24.652643+00:00 GithubOSV Importer Fixing VCID-431f-dqzd-zbax https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-mqgv-67vx-g4m5/GHSA-mqgv-67vx-g4m5.json 38.6.0
2026-06-11T20:27:51.714806+00:00 GHSA Importer Fixing VCID-431f-dqzd-zbax https://github.com/advisories/GHSA-mqgv-67vx-g4m5 38.6.0
2026-06-11T20:27:27.020446+00:00 GHSA Importer Affected by VCID-5ytj-hcs8-7ucd https://github.com/advisories/GHSA-c6h4-gc3f-hgjq 38.6.0