Remote code execution

Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28277

Prototype pollution in the npm module dset (versions 1.0.0–2.0.1) allows an attacker to pollute Object.prototype, enabling DoS and potentially remote code execution. Affected function is the export logic handling obj, keys, val without proper validation. Documented exploitation points include man...

CVE-2020-28277

Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution...