Skip to content
OpenAdvisories

Package · npm

sds

2 known vulnerabilities.

2 results · Feed

  • Medium 4.0

    Prototype Pollution

    This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-7618](…

  • Medium 5.3

    Prototype Pollution in sds

    sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.