{"id":"CVE-2021-23440","aliases":["GHSA-4jqc-8m5r-9rpr"],"url":"https://o3.security/vulnerability/CVE-2021-23440","summary":"Prototype Pollution in set-value","details":"This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.","published":"2021-09-12T13:15:07.383Z","modified":"2026-07-08T05:58:55.710235589Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":3,"affectedPackages":[{"ecosystem":"npm","name":"set-value","fixedVersion":"4.0.1"},{"ecosystem":"npm","name":"set-value","fixedVersion":"2.0.1"},{"ecosystem":"npm","name":"set-value","fixedVersion":"3.0.3"},{"ecosystem":"NuGet","name":"set-value-nuget","fixedVersion":"2.0.0"}],"fix":{"url":"https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452","label":"jonschlinkert/set-value@7cf8073"},"references":[{"type":"FIX","url":"https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452"},{"type":"FIX","url":"https://github.com/jonschlinkert/set-value/pull/33"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2022.html"},{"type":"EVIDENCE","url":"https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212"},{"type":"EVIDENCE","url":"https://snyk.io/vuln/SNYK-JS-SETVALUE-1540541"},{"type":"EVIDENCE","url":"https://www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23440"},{"type":"WEB","url":"https://github.com/jonschlinkert/set-value/pull/33/commits/383b72d47c74a55ae8b6e231da548f9280a4296a"},{"type":"WEB","url":"https://github.com/jonschlinkert/set-value/commit/09c4b108fea3c0260008590053ff13da64913245"},{"type":"WEB","url":"https://github.com/jonschlinkert/set-value/commit/cb12f14955dde6e61829d70d1851bfea6a3c31ad"},{"type":"PACKAGE","url":"https://github.com/jonschlinkert/set-value"},{"type":"WEB","url":"https://www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T05:58:55.710235589Z"}}