Vulnerabilities
2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2020-7637 | class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. class-transformer before 0.3.1 allow attackers to perform Prototype Pollution. The classToPlainFromExist function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. NVD description · AI analysis pending | 5.3 | 1% | PoC |
| — | |
| CVE-2019-15476 | Former before 4.2.1 has XSS via a checkbox value. Former before 4.2.1 has XSS via a checkbox value. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — |