{"id":"CVE-2021-23440","aliases":["GHSA-4jqc-8m5r-9rpr"],"url":"https://o3.security/vulnerability/CVE-2021-23440","summary":"Prototype Pollution in set-value","details":"This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.","published":"2021-09-12T13:15:07.383Z","modified":"2026-07-08T05:58:55.710235589Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":3,"affectedPackages":[{"ecosystem":"npm","name":"set-value","fixedVersion":"4.0.1"},{"ecosystem":"npm","name":"set-value","fixedVersion":"2.0.1"},{"ecosystem":"npm","name":"set-value","fixedVersion":"3.0.3"},{"ecosystem":"NuGet","name":"set-value-nuget","fixedVersion":"2.0.0"}],"fix":{"url":"https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452","label":"jonschlinkert/set-value@7cf8073"},"references":[{"type":"FIX","url":"https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452"},{"type":"FIX","url":"https://github.com/jonschlinkert/set-value/pull/33"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"type":"EVIDENCE","url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212"},{"type":"EVIDENCE","url":"https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541"},{"type":"EVIDENCE","url":"https://www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2/"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:58:55.710235589Z"}}