Underscore-keypath Project Underscore-keypath — known CVE vulnerabilities
Every CVE whose affected-product data names Underscore-keypath Project Underscore-keypath, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2023-26139 — CVSS 7.5 (high): Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty()…