CyberSecBulletin

Org.webjars.npm:dset vulnerabilities

We track 1 vulnerability in Org.webjars.npm:dset products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2024.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Org.webjars.npm:dset vulnerabilities

  • 8.2 High severity

    dset: Improperly Controlled Modification of Object Prototype Attributes

    CVE-2024-21529Dset

    Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property __proto__,