Description
Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution.
Remediation
References
https://github.com/strikeentco/set/commit/102cc6b2e1d1e0c928ced87e75df759d5541ff60
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-28267
Related Vulnerabilities
CVE-2020-36376 Vulnerability in npm package aaptjs
CVE-2022-24785 Vulnerability in maven package org.webjars.bower:moment
CVE-2023-37951 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration
CVE-2021-21350 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2018-20676 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap-sass