dset (npm)
A tiny (197B) utility for safely writing deep Object values~!
Advisories
3
Latest version
3.1.4
Released Sep 9, 2024
License
MIT
OpenSSF Scorecard
3.0 / 10
How to fix
Upgrading to 3.1.4 or later clears every advisory below that has a fix.
Upgrade commands
npm
npm install dset@3.1.4yarn
yarn add dset@3.1.4pnpm
pnpm add dset@3.1.4Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-f6v4-cf5j-vf3w dset Prototype Pollution vulnerability |
High EPSS 0.75% |
< 3.1.4 | 3.1.4 |
| GHSA-23wx-cgxq-vpwx Prototype Pollution in dset |
High EPSS 1.84% |
< 3.1.2 | 3.1.2 |
| GHSA-q4xc-7cw8-cgfj dset vulnerable to prototype pollution |
Critical EPSS 3.07% |
>= 1.0.0, < 2.0.1 | 2.0.1 |
Source: git+https://github.com/lukeed/dset.git
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor