Version Details and Security Vulnerabilities

📦

expand-object

0.4.2

Comparision Betweeen 0.4.2 and 0.4.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.

Version Details and Security Vulnerabilities

📦

expand-object

0.4.2

Comparision Betweeen 0.4.2 and 0.4.1

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

N/A

Unpacked Size

N/A

Security Vulnerabilities

Security Details

Comprehensive list of direct or transitive vulnerabilities for version 0.4.2 of the package expand-object.

All Security Vulnerabilities

All the vulnerabilities related to the version 0.4.2 of the package

Summary:

expand-object Vulnerable to Prototype Pollution via the expand() Function

Details:

Versions of the package expand-object from 0.0.0 to 0.4.2 are vulnerable to Prototype Pollution in the expand() function in index.js. This function expands the given string into an object and allows a nested property to be set without checking the provided keys for sensitive properties like proto.

Details about expand-object@0.4.2

Summary:

Prototype Pollution in set-value

Details:

Versions of set-value prior to 3.0.1 or 2.0.1 are vulnerable to Prototype Pollution. The set function fails to validate which Object properties it updates. This allows attackers to modify the prototype of Object, causing the addition or modification of an existing property on all objects.

Recommendation

If you are using set-value 3.x, upgrade to version 3.0.1 or later. If you are using set-value 2.x, upgrade to version 2.0.1 or later.

Details about set-value@0.3.3

Summary:

Prototype Pollution in set-value

Details:

This affects the package set-value. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.

Details about set-value@0.3.3

Security Details

Comprehensive list of direct or transitive vulnerabilities for version 0.4.2 of the package expand-object.

All Security Vulnerabilities

All the vulnerabilities related to the version 0.4.2 of the package

Summary:

expand-object Vulnerable to Prototype Pollution via the expand() Function

Details:

Details about expand-object@0.4.2

Summary:

Prototype Pollution in set-value

Details:

Recommendation

If you are using set-value 3.x, upgrade to version 3.0.1 or later. If you are using set-value 2.x, upgrade to version 2.0.1 or later.

Details about set-value@0.3.3

Summary:

Prototype Pollution in set-value

Details:

This affects the package set-value. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.

Details about set-value@0.3.3

Version Details and Security Vulnerabilities

expand-object

Comparision Betweeen 0.4.2 and 0.4.1

Security Vulnerabilities

Version Details and Security Vulnerabilities

expand-object

Comparision Betweeen 0.4.2 and 0.4.1

Security Vulnerabilities

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

Recommendation

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

Recommendation

Version Details and Security Vulnerabilities

expand-object

Comparision Betweeen 0.4.2 and 0.4.1

Security Vulnerabilities

Version Details and Security Vulnerabilities

expand-object

Comparision Betweeen 0.4.2 and 0.4.1

Security Vulnerabilities

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

expand-object@0.4.2 GHSA-4vjr-hfpp-2m7w 5.5

set-value@0.3.3 GHSA-4g88-fppr-53pp 9.8

Recommendation

set-value@0.3.3 GHSA-4jqc-8m5r-9rpr 7.3

Security Details

All

Transitive Dependencies

Package

All Security Vulnerabilities

expand-object@0.4.2 GHSA-4vjr-hfpp-2m7w 5.5

set-value@0.3.3 GHSA-4g88-fppr-53pp 9.8

Recommendation

set-value@0.3.3 GHSA-4jqc-8m5r-9rpr 7.3