Description
The set method is vulnerable to prototype pollution with specially crafted inputs.
Recommendation
Update the min-dash package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.8.1
- Patched version(s): 3.8.1
References
Could your website be exposed too?
SmartScanner can check your website for Prototype pollution in min-dash and gives you actionable findings to investigate.
Start a free scanRelated Issues
- json-schema is vulnerable to Prototype Pollution - CVE-2021-3918
- Prototype pollution vulnerability in js-extend - CVE-2021-25945
- Prototype Pollution in immer - immer - GHSA-c36v-fmgq-m8hx - CVE-2021-3757
- jquery-plugin-query-object contains prototype pollution vulnerability - CVE-2021-20083
You might also like:
See something that needs correcting? Let us knowUpdated July 18, 2025