Description
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.16.4
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in dojo and gives you actionable findings to investigate.
Start a free scanRelated Issues
- npm package rfc6902 vulnerable to Prototype Pollution - CVE-2021-4245
- Prototype Pollution in sey - CVE-2021-23663
- Prototype Pollution in jointjs - CVE-2021-23444
- Prototype pollution in dojo - dojo - CVE-2020-5258
You might also like:
See something that needs correcting? Let us knowUpdated January 31, 2023


