Lucene search
+L

1 matches found

OSV
OSV
added 2024/09/11 6:30 a.m.10 views

GHSA-F6V4-CF5J-VF3W dset Prototype Pollution vulnerability

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

8.8CVSS7.1AI score0.00745EPSS
SaveExploits0References4
Rows per page
Query Builder