VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 17, 2021· Updated Jun 17, 2026

CVE-2021-23450

CVE-2021-23450

Description

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
dojonpm
<= 1.16.4—

Affected products

12
  • Linux Foundation/Dojo
    cpe:2.3:a:linuxfoundation:dojo:*:*:*:*:*:node.js:*:*
    Range: <1.17.0
  • Oracle Corporation/Communications Policy Management
    cpe:2.3:a:oracle:communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Primavera Unifier5 versions
    cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*range: >=17.7,<=17.12
    • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*
  • Oracle Corporation/Weblogic Server2 versions
    cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • dojo/dojodescription
  • ghsa-coords
    pkg:npm/dojo
    Range: <= 1.16.4

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.