Description
Prototype pollution vulnerability in ‘set-in’ versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.
Recommendation
Update the set-in package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.0.1
- Patched version(s): 2.0.1
References
Could your website be exposed too?
SmartScanner can check your website for Prototype pollution in set-in - set-in and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype pollution vulnerability in 'deep-set - CVE-2020-28276
- Prototype Pollution in lodash - lodash.set - CVE-2020-8203
- set-in Affected by Prototype Pollution - CVE-2026-26021
- Prototype Pollution in deep-get-set - deep-get-set - CVE-2020-7715
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023