Springtree Madlib-object-utils — known CVE vulnerabilities

Every CVE whose affected-product data names Springtree Madlib-object-utils, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-7701 — CVSS 9.8 (critical): madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.
• CVE-2022-24279 — CVSS 7.5 (high): The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to…