CVE-2021-23558: Bmoor Project Bmoor

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664)

Affected products

• Bmoor Project Bmoor: before 0.10.1 (fixed in 0.10.1)

Published 2022-01-28. Last modified 2026-06-17.