Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package keyget, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2020-28272 — CVSS 9.8 (critical): Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service and may lead to…
CVE-2021-23760 — CVSS 5.6 (medium): The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to…