Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4u71-dtd2-u3hw
Vulnerability ID VCID-4u71-dtd2-u3hw
Aliases CVE-2022-25862
GHSA-ph28-wwfj-fv7f
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.0023 https://api.first.org/data/v1/epss?cve=CVE-2022-25862
epss 0.0023 https://api.first.org/data/v1/epss?cve=CVE-2022-25862
cvssv3.1 7.5 https://github.com/monsterkodi/sds
generic_textual HIGH https://github.com/monsterkodi/sds
cvssv3.1 7.5 https://github.com/monsterkodi/sds/blob/master/js/set.js
generic_textual HIGH https://github.com/monsterkodi/sds/blob/master/js/set.js
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2020-7618
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2020-7618
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-25862
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2022-25862
cvssv3.1 7.5 https://snyk.io/vuln/SNYK-JS-SDS-2385944
generic_textual HIGH https://snyk.io/vuln/SNYK-JS-SDS-2385944
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-25862
https://github.com/monsterkodi/sds
https://github.com/monsterkodi/sds/blob/master/js/set.js
https://nvd.nist.gov/vuln/detail/CVE-2022-25862
https://snyk.io/vuln/SNYK-JS-SDS-2385944
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/monsterkodi/sds
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/monsterkodi/sds/blob/master/js/set.js
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-7618
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-25862
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://snyk.io/vuln/SNYK-JS-SDS-2385944
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.45957
EPSS Score 0.0023
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-12T02:06:37.304724+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0