| Release | Version |
|---|---|
| buster | 0.11.4-2+deb10u1 |
| buster (security) | 0.11.4-2+deb10u2 |
| bullseye | 0.11.5-3+deb11u1 |
| bookworm | 0.11.8+~0.11.1-2 |
| trixie | 0.11.8+~0.11.1-2 |
| sid | 0.11.8+~0.11.1-2 |
| Bug | Description |
|---|---|
| CVE-2021-23434 | This affects the package object-path before 0.11.6. A type confusion v ... |
| CVE-2021-3805 | object-path is vulnerable to Improperly Controlled Modification of Obj ... |
| CVE-2020-15256 | A prototype pollution vulnerability has been found in `object-path` <= ... |
| DSA / DLA | Description |
|---|---|
| DLA-3291-1 | node-object-path - security update |