Login Request a demo
CA
Product
Cached-path-relative
by Cached-path-relative Project · last CVE Jan 21, 2022
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities2Critical1High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cached-path-relative to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-23518
9.8
2%
Jan 21
The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the…
Affected: before 1.1.0
CVE-2018-16472
7.5
2%
Nov 6
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects…
Affected: through 1.0.1
Showing 2