CLSA-2026-1788560246 TuxCare security update for dset (1 CVE)

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.2-tuxcare.1...

PT-2026-91817

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.2-tuxcare.1...

ROOT-APP-NPM-CVE-2022-25645 CVE-2022-25645 in dset - Patched by Root

Root has patched CVE-2022-25645 in the dset package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21529 CVE-2024-21529 in dset - Patched by Root

Root has patched CVE-2024-21529 in the dset package for Root:npm. Multiple fixed versions available...

CLSA-2026-1780447840 TuxCare security update for dset (1 CVE)

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.3-tuxcare.1...

PT-2026-74930

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.3-tuxcare.1...

EUVD-2022-1897

Malicious code in bioql PyPI...

EUVD-2024-2781

Malicious code in bioql PyPI...

EUVD-2022-4888

Malicious code in bioql PyPI...

Prototype Pollution

dset is vulnerable to Prototype Pollution. The vulnerability is due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the objects in the program...

CVE-2024-21529

A flaw was found in the dset package. Affected versions of this package are vulnerable to Prototype Pollution via the dset function due to improper user input sanitization. This vulnerability allows the attacker to inject a malicious object property using the built-in Object property proto, which...

0xsodium (>=0.2.0, <=0.14.0), @0xsodium/graphquery (>=0.2.0, <=0.14.0) +171 more potentially affected by CVE-2024-21529 via dset (>=3.1.0, <=3.1.3)

dset NPM version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.6.0, =0.2.0, =0.2.0, =0.0.0, =1.4.0-beta.2, =0.1.0, =0.1.10, =0.1.11 - @didomi/react 1.8.3 and more Source cves: CVE-2024-21529 Source...

dset Prototype Pollution vulnerability

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

GHSA-F6V4-CF5J-VF3W dset Prototype Pollution vulnerability

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

Lukeed dset 安全漏洞

Lukeed Dset is a codebase by the individual developer of Lukeed based on the Javascript language that can assign values to objects of dictionary type. A security vulnerability exists in Lukeed dset versions prior to 3.1.4, which stems from improperly cleaned user input and is susceptible to...