Every CVESearch/Get API key

GHSA-ch82-gqh6-9xj9

Prototype Pollution in get-setter

No score

GHSA-ch82-gqh6-9xj9 is a vulnerability with no CVSS score yet in get-setter, published September 4, 2020. No source lists public exploit code. No source names a fixed version.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.

Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

Affected packages

Affected packages
PackageAffectedFixed
get-setter
npm
0.0.0 and laterNone known

What each source reports

GitHub AdvisoriesNo score

Prototype Pollution in get-setter

All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.

Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

Record
GHSA-ch82-gqh6-9xj9
Weakness
CWE-1321
Updated
2026-11-02
OSVNo score

Prototype Pollution in get-setter

All versions of get-setter are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.

Recommendation

No fix is currently available. Consider using an alternative package until a fix is made available.

Record
GHSA-ch82-gqh6-9xj9
Weakness
CWE-1321
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open