← Back

Tree Kit

tree_kit

Vendor: Tree Kit Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-38894
1Tree Kit Project
1Tree Kit
Jul 9, 2026
Aug 16, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.
CVE-2021-4278
1Tree Kit Project
1Tree Kit
Jun 17, 2026
Dec 25, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
A vulnerability classified as problematic has been found in cronvel tree-kit up to 0.6.x. This affects an unknown part. The manipulation leads to improperly controlled modification of object prototype attributes ('protot...Show more
A vulnerability classified as problematic has been found in cronvel tree-kit up to 0.6.x. This affects an unknown part. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). Upgrading to version 0.7.0 is able to address this issue. The name of the patch is a63f559c50d70e8cb2eaae670dec25d1dbc4afcd. It is recommended to upgrade the affected component. The identifier VDB-216765 was assigned to this vulnerability.Show less