p PatchFirst

PatchFirst · Latest vulnerabilities

@tmlmobilidade/utils vulnerabilities

Vulnerabilities published for @tmlmobilidade/utils in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-45325

    High · CVSS 8.2EPSS 0.46%Fix available

    Gestor de Oferta: Prototype pollution in @tmlmobilidade/utils setValueAtPath

    Gestor de Oferta is a web application for managing mobility service offerings. Prior to 20260509.0340.15, @tmlmobilidade/utils has a prototype pollution vulnerability in setValueAtPath() in packages/utils/src/generic/value-at-path.ts because unsafe path segments are not blocked. This issue is fixed in version 20260509.0340.15.

    @tmlmobilidade/utilsNode.js
    • Update to 20260509.0340.15
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →