https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:04:00 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-06543 cnvd-2021-06543 https://cve.radiocsirt.org/vuln/cnvd-2021-06543 https://cve.radiocsirt.org/vuln/euvd-2026-47000 EUVD-2026-47000 https://cve.radiocsirt.org/vuln/euvd-2026-47000 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28277 <p>Prototype pollution vulnerability in &#39;dset&#39; versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.</p> <p>Prototype pollution vulnerability in &#39;dset&#39; versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-28277 https://cve.radiocsirt.org/vuln/ghsa-q4xc-7cw8-cgfj <p><strong>Affected:</strong> npm: dset</p> <p>### Overview Prototype pollution vulnerability in &#39;dset&#39; versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.</p> <p>### Details The NPM module &#39;dset&#39; can be abused by Prototype Pollution vulnerability since the function ‘export ()&#39; did not check for the type of object before assigning value to the property. Due to this flaw an attacker could create a non-existent property or able to manipulate the property which leads to Denial of Service or potentially Remote code execution.</p> <p>### PoC The export function accepts three arguments `obj, keys, val`. Due to the absence of validation, at values passed into `keys, val` arguments, an attacker can supply a malicious value by adjusting the `keys` value to include the `__proto__` property. Since there is no validation before assigning property to check whether the assigned `keys` is the Object&#39;s own property or not, the property `isAdmin` will be directly be assigned to the empty obj({}) thereby polluting the Object prototype. Later in the code, if there is a check to validate `isAdmin` the valued would be substituted as &#34;true&#34; as it had been polluted.</p> <p>```js const dset = require(&#39;dset&#39;); var obj = {} console.log(&#34;Before : &#34; + obj.isAdmin); dset(obj, &#39;__proto__.polluted&#39;, true); console.log(&#34;After : &#34; + obj.polluted); ```</p> <p><strong>Affected:</strong> npm: dset</p> <p>### Overview Prototype pollution vulnerability in &#39;dset&#39; versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remote code execution.</p> <p>### Details The NPM module &#39;dset&#39; can be abused by Prototype Pollution vulnerability since the function ‘export ()&#39; did not check for the type of object before assigning value to the property. Due to this flaw an attacker could create a non-existent property or able to manipulate the property which leads to Denial of Service or potentially Remote code execution.</p> <p>### PoC The export function accepts three arguments `obj, keys, val`. Due to the absence of validation, at values passed into `keys, val` arguments, an attacker can supply a malicious value by adjusting the `keys` value to include the `__proto__` property. Since there is no validation before assigning property to check whether the assigned `keys` is the Object&#39;s own property or not, the property `isAdmin` will be directly be assigned to the empty obj({}) thereby polluting the Object prototype. Later in the code, if there is a check to validate `isAdmin` the valued would be substituted as &#34;true&#34; as it had been polluted.</p> <p>```js const dset = require(&#39;dset&#39;); var obj = {} console.log(&#34;Before : &#34; + obj.isAdmin); dset(obj, &#39;__proto__.polluted&#39;, true); console.log(&#34;After : &#34; + obj.polluted); ```</p> https://cve.radiocsirt.org/vuln/ghsa-q4xc-7cw8-cgfj https://cve.radiocsirt.org/vuln/gsd-2020-28277 gsd-2020-28277 https://cve.radiocsirt.org/vuln/gsd-2020-28277