dset vulnerable to prototype pollution

Description

Prototype pollution vulnerability in ‘dset’ versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Recommendation

Update the dset package to the latest compatible version. Followings are version details:

Affected version(s): >= 1.0.0, < 2.0.1
Patched version(s): 2.0.1

References

GHSA-q4xc-7cw8-cgfj
web.archive.org
CVE-2020-28277
CWE-1321
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for dset vulnerable to prototype pollution and gives you actionable findings to investigate.

Start a free scan

Related Issues

datatables.net vulnerable to Prototype Pollution due to incomplete fix - CVE-2020-28458
flat vulnerable to Prototype Pollution - CVE-2020-36632
TypeORM vulnerable to MAID and Prototype Pollution - CVE-2020-8158
yargs-parser Vulnerable to Prototype Pollution - CVE-2020-7608

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated February 01, 2024