CVE-2024-21529

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property proto, which is recursively assigned to all the...

PT-2024-18943

Name of the Vulnerable Software and Affected Versions dset versions prior to 3.1.4 Description The issue arises from improper user input sanitization in the dset function, allowing an attacker to inject malicious object properties using the built-in Object property proto . This vulnerability...