npm deep-set vulnerabilities

Latest npm deep-set CVEs

Newest publication first

1. CVE-2020-28276 Prototype pollution vulnerability in 'deep-set'

   Published 2020-12-29

   Critical·CVSS 9.8 EPSS 3.1%

   Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.