Dset Project

dset_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Dset

dset

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-25645 1Dset Project 1Dset Jun 17, 2026 May 1, 2022 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protory...Show more All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protorype. By crafting a malicious object, it is possible to bypass this check and achieve prototype pollution.Show less
CVE-2020-28277 1Dset Project 1Dset Jun 17, 2026 Dec 29, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-25645

1Dset Project

1Dset

Jun 17, 2026

May 1, 2022

N/A· v4

8.1 HIGH· v3

6.8 MEDIUM· v2

All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if the top-level path contains __proto__, constructor or protorype. By crafting a malicious object, it is possible to bypass this check and achieve prototype pollution.Show less

CVE-2020-28277

1Dset Project

1Dset

Jun 17, 2026

Dec 29, 2020

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.