CyberSecBulletin

Dset vulnerabilities

We track 2 vulnerabilities in Dset products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2024.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Dset vulnerabilities

  • 8.2 High severity

    dset: Improperly Controlled Modification of Object Prototype Attributes

    CVE-2024-21529Dset

    Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property __proto__,

  • 8.1 High severity

    dset: Improperly Controlled Modification of Object Prototype Attributes

    CVE-2022-25645DsetEPSS 1.84%

    All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protorype. By crafting a malicious object, it i