← CVE Intelligence

CVE-2022-25862

Prototype Pollution PUBLISHED

Description (CNA)

This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-7618](https://security.snyk.io/vuln/SNYK-JS-SDS-564123)

Affected (CNA)

Vendor / productVersions
n/a / sdsaffected 0.0.0 before unspecified

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.