Launchpad.net

CVE 2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

See the CVE page on Mitre.org for more details.