Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Dset Project Component: Dset Clear all filters
TI-2022-09229 CVE-2022-25645 · GHSA-23wx-cgxq-vpwx

Prototype pollution in dset

Priority LOW 39

All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protory…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0184 Published 2022-05-01 Partial fix · 3.1.2 CWE-1321
TI-2020-17170 CVE-2020-28277 · GHSA-q4xc-7cw8-cgfj

Prototype pollution in dset

Priority MEDIUM 48

Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03071 Published 2020-12-29 Fixed in 2.0.1 CWE-1321