CVE-2018-16472: Cached-Path-Relative Project Cached-Path-Relative

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.

Affected products

• Cached-Path-Relative Project Cached-Path-Relative: up to and including 1.0.1
• Debian Debian Linux: version 10.0 only

Published 2018-11-06. Last modified 2026-06-17.