← Back

Sds

sds

Vendor: Sds Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-25862
1Sds Project
1Sds
Jun 17, 2026
May 13, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives fro...Show more
This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-7618](https://security.snyk.io/vuln/SNYK-JS-SDS-564123)Show less
CVE-2020-7618
1Sds Project
1Sds
Jun 17, 2026
Apr 7, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.