CVE-2021-23507

Name of the Vulnerable Software and Affected Versions object-path-set versions prior to 1.0.2

Description The issue allows an attacker to merge object prototypes into it via the setPath method, enabling Prototype Pollution. This vulnerability is a result of an incomplete fix.

Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the setPath method until a patch is applied.