Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

object-path

Ecosystem:
npm
Package URL:
pkg:npm/object-path
Total PRs:
117 Dependabot PRs
Latest PR:
2 months ago
Unique Repositories:
107 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Prototype pollution in object-path
GHSA-cwx2-736x-mf6w CVE-2020-15256 HIGH published over 5 years ago • updated 3 months ago
### Impact A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited...
Prototype Pollution in object-path
GHSA-8v63-cqqc-6r2c CVE-2021-3805 HIGH published over 4 years ago • updated 2 months ago
object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). The `del()` function fails ...
Prototype Pollution in object-path
GHSA-v39p-96qg-c8rf CVE-2021-23434 MODERATE published almost 5 years ago • updated 5 days ago
This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components ...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump object-path from 0.11.5 to 0.11.8

iray-tno/chirashi-js #696

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
iray-tno
Bump object-path from 0.11.4 to 0.11.8

omeroid/omeroid.github.io #17

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
omeroid
Bump object-path from 0.11.4 to 0.11.8

rascati/rascati.github.io #27

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago
rascati
Bump object-path from 0.11.4 to 0.11.8

glen-cheney/glencheney #23

0.11.4 → 0.11.8 Patch PR
Open over 4 years ago 1 comment
glen-cheney
Bump object-path from 0.11.4 to 0.11.8

sauloefo/my-site #26

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
sauloefo
Bump object-path from 0.11.4 to 0.11.8

infiniteluke/lukeherrington.com #27

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
infiniteluke
Bump object-path from 0.11.4 to 0.11.8

aengl/owlpath #24

0.11.4 → 0.11.8 Patch PR
Merged over 4 years ago
aengl
Bump object-path from 0.11.5 to 0.11.8

zipang/gatsby-starter-forestry #27

0.11.5 → 0.11.8 Patch PR
Merged over 4 years ago
zipang
build(deps): bump object-path from 0.11.4 to 0.11.8 in /demo/graphql-api

dzzzzzy/Nestjs-Learning #113

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
dzzzzzy
Bump object-path from 0.11.4 to 0.11.8

franklinfarahani/franklin.codes #25

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
franklinfarahani
Bump object-path from 0.11.4 to 0.11.8

manuelbieh/manuelbieh.de #69

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago
manuelbieh
Bump object-path from 0.11.5 to 0.11.8

mgechev/revive.run #38

0.11.5 → 0.11.8 Patch PR
Merged over 4 years ago
mgechev
chore(deps): bump object-path from 0.11.5 to 0.11.8

cdtinney/tinney.dev #39

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago 2 comments
cdtinney
Bump object-path from 0.11.5 to 0.11.8

maxjeffwell/portfolio-gatsby #28

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago 2 comments
maxjeffwell
Bump object-path from 0.11.4 to 0.11.8

celador/JohnAaronNelson #34

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
celador
Bump object-path from 0.11.5 to 0.11.8

VulcanJS/Vulcan #2730

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago
VulcanJS
Bump object-path from 0.11.4 to 0.11.8

maxjeffwell/educationELLy-graphql-server #15

0.11.4 → 0.11.8 Patch PR
Closed over 4 years ago 2 comments
maxjeffwell
Bump object-path from 0.11.5 to 0.11.8 in /agent

enebular/enebular-runtime-agent #65

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago
enebular
Bump object-path from 0.11.5 to 0.11.8

maxjeffwell/code-talk-graphql-server #54

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago 2 comments
maxjeffwell
Bump object-path from 0.11.5 to 0.11.8

BioWareRu/BioEngine.BRC.Admin #637

0.11.5 → 0.11.8 Patch PR
Closed over 4 years ago 1 comment
BioWareRu
Bump object-path from 0.11.4 to 0.11.7

jackhsu978/jackhsu.dev #20

0.11.4 → 0.11.7 Patch PR
Closed almost 5 years ago 1 comment
jackhsu978
Bump object-path from 0.11.4 to 0.11.5

zvakanaka/blog #3

0.11.4 → 0.11.5 Patch PR
Closed over 5 years ago
zvakanaka
Bump object-path from 0.11.4 to 0.11.5

fraserxu/fraserxu.dev #39

0.11.4 → 0.11.5 Patch PR
Closed over 5 years ago 1 comment
fraserxu
Bump object-path from 0.11.4 to 0.11.5

owsas/parse-cloud-class #25

0.11.4 → 0.11.5 Patch PR
Closed over 5 years ago 2 comments
owsas
Bump object-path from 0.11.4 to 0.11.5

michalczaplinski/czaplinski.io #11

0.11.4 → 0.11.5 Patch PR
Closed over 5 years ago 1 comment
michalczaplinski
build(deps): [security] bump object-path from 0.11.4 to 0.11.5

lekterable/website #180

0.11.4 → 0.11.5 Patch PR
Closed over 5 years ago 1 comment
lekterable
Package Details
Name: object-path
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/object-path
JSON API: View JSON
Security Advisories

3

Active advisories
HIGH 2
MODERATE 1
View All npm Advisories
Package Information
Description:

Access deep object properties using a path

Repository: https://github.com/mariocasciaro/object-path
Homepage: https://github.com/mariocasciaro/object-path
Latest Release: 0.11.8
almost 5 years ago
Dependent Repos: 950,121
Dependent Packages: 1,645
Downloads: 8,463,124
Ranking: Top 0.0343% by dependent repos Top 0.0923% by downloads Top 0.0458% by dependent pkgs
PR Status
Open 49 (41.9%)
Merged 9 (7.7%)
Closed 56 (47.9%)
PR Types
Patch 76 (65.0%)
Removal 14 (12.0%)