Description All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. Remediation References CVE-2021-23450 Related Vulnerabilities Liferay Portal Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-43763) PHP Stack-based Buffer Overflow Vulnerability (CVE-2026-7260) WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms Cross-Site Request Forgery (5.3.0.0) Drupal Core 8.9.x Cross-Site Request Forgery (8.9.0 - 8.9.18) WordPress Plugin Contus HD FLV Player 'uploadVideo.php' Arbitrary File Upload (1.7) Severity Critical Classification CVE-2021-23450 CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities