Description
sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' function located in 'js/set.js'.
Remediation
References
https://github.com/monsterkodi/sds/blob/master/js/set.js#L31
https://snyk.io/vuln/SNYK-JS-SDS-564123
Related Vulnerabilities
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport
CVE-2021-23509 Vulnerability in npm package json-ptr
CVE-2020-8129 Vulnerability in npm package script-manager
CVE-2022-36900 Vulnerability in maven package com.compuware.jenkins:compuware-zadviser-api
CVE-2016-5682 Vulnerability in maven package org.webjars.npm:swagger-ui