Read the docs

Dset Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Dset Project records in CISA KEV

No Dset Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dset 2 records MEDIUM

Records

2 records in Dset · all components

TI-2020-17170 CVE-2020-28277 · GHSA-q4xc-7cw8-cgfj

Prototype pollution in dset

Priority MEDIUM 48

Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03071 Published 2020-12-29 Fixed in 2.0.1 CWE-1321
TI-2022-09229 CVE-2022-25645 · GHSA-23wx-cgxq-vpwx

Prototype pollution in dset

Priority LOW 39

All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protory…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0184 Published 2022-05-01 Partial fix · 3.1.2 CWE-1321
Open these records in search →