CVE-2021-23760: Keyget Project Keyget

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-28272](https://security.snyk.io/vuln/SNYK-JS-KEYGET-1048048)

Affected products

• Keyget Project Keyget: affected versions not specified

Published 2022-01-28. Last modified 2026-06-17.