MEDIUM5.3
GHSA-cxm3-284p-qc4v
Prototype Pollution in sds
Quick fix
GHSA-cxm3-284p-qc4v — sds: upgrade to the fixed version with the command below.
npm install sds@4.0.0Details
Affected versions of `sds` are vulnerable to prototype pollution. The `set` function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects.
## Recommendation
Upgrade to version 4.0.0 or later
Are you affected?
Enter the version of the package you're using.