VulnSea

@rvf/set-get vulnerabilities

CVEs whose affected-version data names the @rvf/set-get package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112309High· 7.5
today

@rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a f…

▾ Twilightairjp73 · @rvf/set-getvia CVEORG
@rvf/set-get vulnerabilities (CVEs) · VulnSea