Dset Project Dset
2 CVEs affecting Dset Project Dset. Latest disclosed: 2022-05-01. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28277 | Critical | 9.8 | 2020-12-29 | Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution. |
CVE-2022-25645 | Medium | 6.5 | 2022-05-01 | All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if… |