Description All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. Remediation References CVE-2021-23450 Related Vulnerabilities WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.1) WordPress Plugin Build App Online SQL Injection (1.0.18) Squid Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2019-12526) WordPress Plugin Custom Sidebars-Dynamic Widget Area Manager Cross-Site Scripting (2.1.0.1) Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-34798) Severity Critical Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-1321 CVE-2021-23450