scim-patch vulnerabilities
CVEs whose affected-version data names the scim-patch package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-61834Medium· 4.3PoCscim-patch is a library for applying SCIM patch operations
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of …
▾ Twilightthomaspoignant · scim-patchEPSS 0.40%via NVD
CVE-2026-48170Critical· 9.1`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`
`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs prototype pollution when applying a SCIM PATCH operation whose `value` object contains a key like `"__proto__.someProp"`. After one such patch, `Object.protot…
▾ Midnightscim-patch · scim-patchEPSS 0.40%via NVD