CLSA-2026-1788560246 TuxCare security update for dset (1 CVE)

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.2-tuxcare.1...

PT-2026-91817

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.2-tuxcare.1...

ROOT-APP-NPM-CVE-2022-25645 CVE-2022-25645 in dset - Patched by Root

Root has patched CVE-2022-25645 in the dset package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21529 CVE-2024-21529 in dset - Patched by Root

Root has patched CVE-2024-21529 in the dset package for Root:npm. Multiple fixed versions available...

CLSA-2026-1780447840 TuxCare security update for dset (1 CVE)

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.3-tuxcare.1...

PT-2026-74930

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.3-tuxcare.1...

dicom-transfer-syntax-registry (>=0.8.2, <=0.9.1), jxl-color (>=0.1.0, <=0.10.2) +8 more potentially affected by CVE-2026-52834 via jxl-grid (>=0.1.1, <=0.5.3)

jxl-grid CARGO version =0.1.1, =0.8.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0-rc0 Source cves: CVE-2026-52834 Source advisory: GHSA-5PMV-RX8R-WMV5...

EUVD-2022-4888

Malicious code in bioql PyPI...

EUVD-2024-2781

Malicious code in bioql PyPI...

EUVD-2022-1897

Malicious code in bioql PyPI...

Prototype Pollution

dset is vulnerable to Prototype Pollution. The vulnerability is due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the objects in the program...

CVE-2024-21529

A flaw was found in the dset package. Affected versions of this package are vulnerable to Prototype Pollution via the dset function due to improper user input sanitization. This vulnerability allows the attacker to inject a malicious object property using the built-in Object property proto, which...

GHSA-F6V4-CF5J-VF3W dset Prototype Pollution vulnerability

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

0xsodium (>=0.2.0, <=0.14.0), @0xsodium/graphquery (>=0.2.0, <=0.14.0) +171 more potentially affected by CVE-2024-21529 via dset (>=3.1.0, <=3.1.3)

dset NPM version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.6.0, =0.2.0, =0.2.0, =0.0.0, =1.4.0-beta.2, =0.1.0, =0.1.10, =0.1.11 - @didomi/react 1.8.3 and more Source cves: CVE-2024-21529 Source...

dset Prototype Pollution vulnerability

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

0xsodium (>=0.2.0, <=0.14.0), @0xsodium/graphquery (>=0.2.0, <=0.14.0) +171 more potentially affected by CVE-2024-21529 via dset (>=3.1.0, <=3.1.3)

dset NPM version =3.1.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.6.0, =0.2.0, =0.2.0, =0.0.0, =1.4.0-beta.2, =0.1.0, =0.1.10, =0.1.11 - @didomi/react 1.8.3 and more Source cves: CVE-2024-21529 Source...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

0xsodium (>=0.2.0, <=0.14.0), @0xsodium/graphquery (>=0.2.0, <=0.14.0) +453 more potentially affected by CVE-2024-21529 via dset (>=1.0.1, <=3.1.3)

dset NPM version =1.0.1, =0.2.0, =0.2.0, =0.2.0, =1.7.3, =0.2.0-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.0.4-alpha-20230313142352-3a216dc, =0.6.0, =0.2.0, =0.2.0, =0.0.0, =1.4.0-beta.2, =0.1.0, =0.0.1, =0.0.1, =0.0.8 and more Source cves: CVE-2024-21529 Source adviso...