Search for packages
| purl | pkg:npm/object-path@0.8.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9q81-cy5p-1qhy
Aliases: CVE-2021-23434 GHSA-v39p-96qg-c8rf |
This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the path parameter are arrays. In particular, the condition currentPath === '__proto__' returns false if currentPath is ['__proto__']. This is because the === operator returns always false when the type of the operands is different. |
Affected by 1 other vulnerability. |
|
VCID-ccrg-rtde-g3aa
Aliases: CVE-2021-3805 GHSA-8v63-cqqc-6r2c |
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
Affected by 0 other vulnerabilities. |
|
VCID-dppv-9ef8-ffhx
Aliases: CVE-2020-15256 GHSA-cwx2-736x-mf6w |
Prototype pollution in object-path |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T17:48:08.779414+00:00 | GitLab Importer | Affected by | VCID-ccrg-rtde-g3aa | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/object-path/CVE-2021-3805.yml | 38.6.0 |
| 2026-06-12T17:46:53.469918+00:00 | GitLab Importer | Affected by | VCID-9q81-cy5p-1qhy | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/object-path/CVE-2021-23434.yml | 38.6.0 |
| 2026-06-12T17:28:50.354722+00:00 | GitLab Importer | Affected by | VCID-dppv-9ef8-ffhx | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/object-path/CVE-2020-15256.yml | 38.6.0 |