Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/object-path-set@1.0.1
purl pkg:npm/object-path-set@1.0.1
Next non-vulnerable version 1.0.2
Latest non-vulnerable version 1.0.2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-419s-kngy-wfdn
Aliases:
CVE-2021-23507
GHSA-h6pr-c536-6rjg
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') The package object-path-set is vulnerable to Prototype Pollution via the setPath method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-OBJECTPATHSET-607908
1.0.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T01:20:55.997692+00:00 GitLab Importer Affected by VCID-419s-kngy-wfdn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/object-path-set/CVE-2021-23507.yml 38.6.0