Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

npm package

@tmlmobilidade/utils

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.2npmPublished

    @tmlmobilidade/utils has prototype pollution in its setValueAtPath

    CVE-2026-45325 · GHSA-cmxg-94mg-jq94

    Affected
    • npm @tmlmobilidade/utils < 20260509.340.15
    Fixed in
    20260509.340.15· Vendor fix available
    Issue
    Impact Prototype pollution vulnerability in @tmlmobilidade/utils for setValueAtPath(). Patches A fix is available in versions 20260509.340.15 and up.

    Recommended action: Upgrade to 20260509.340.15 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.devSource checked Evidence →