7.5
High
CVE-2021-23460 The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of…
Description
The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| min-dash 3.8 | earliest → < 3.8.1 | 3.8.1 |