~ / search / GHSA-m8gw-hjpr-rjv7

GHSA-m8gw-hjpr-rjv7

Prototype Pollution in dojo

Source: GitHub Advisory Database (reviewed) High CVE-2021-23450

Packages

EcosystemPackageAffectedFixed in
npm dojo <= 1.16.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

References

External links from the advisory. They lead to third-party sites.