Vulnerability	Vulnerable Version
H Prototype Pollution radashi is a The modern, community-first TypeScript toolkit with all of the fast, readable, and minimal utility functions you need. Type-safe, dependency-free, tree-shakeable, fully tested. Affected versions of this package are vulnerable to Prototype Pollution through the `set` function. An attacker can modify the prototype of all objects in the JavaScript runtime, leading to unexpected behavior, denial of service, or even remote code execution in some specific scenarios by controlling parts of the `path` argument. Note: This is only exploitable if the object's prototype is not set to `null`. How to fix Prototype Pollution? Upgrade `radashi` to version 12.5.1 or higher.	<12.5.1

Prototype Pollution

radashi is a The modern, community-first TypeScript toolkit with all of the fast, readable, and minimal utility functions you need. Type-safe, dependency-free, tree-shakeable, fully tested.

Affected versions of this package are vulnerable to Prototype Pollution through the set function. An attacker can modify the prototype of all objects in the JavaScript runtime, leading to unexpected behavior, denial of service, or even remote code execution in some specific scenarios by controlling parts of the path argument.

Note:

This is only exploitable if the object's prototype is not set to null.

How to fix Prototype Pollution?

Upgrade radashi to version 12.5.1 or higher.

<12.5.1

Go back to all versions of this package