Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package sds, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2020-7618 — CVSS 5.3 (medium): sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the…
CVE-2022-25862 — CVSS 4.0 (medium): This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by…