object-path (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package object-path, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2020-15256 — CVSS 7.7 (high): A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to…
• CVE-2021-3805 — CVSS 7.5 (high): object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
• CVE-2021-23434 — CVSS 5.6 (medium): This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path…