CVE-2021-23460

Published January 21st, 2022

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types.

bpmn-io/min-dash

Minimum utility toolbelt

GitHub

14