org.webjars.npm:dset@3.0.0 vulnerabilities
-
latest version
3.1.1
-
first published
3 years ago
-
latest version published
2 years ago
-
licenses detected
- [3.0.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.npm:dset package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
org.webjars.npm:dset is an A tiny (161B) utility for safely writing deep Object values~! Affected versions of this package are vulnerable to Prototype Pollution via 'dset/merge' mode, as the PoC:
How to fix Prototype Pollution? There is no fixed version for |
[0,)
|