Approved changes feed: RSS · Atom

cpe:2.3:a:camunda:min-dash:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCamunda (96343b41-5a3b-5f3c-9c6f-046200946183)
ProductMin Dash (8c64df8e-f6e7-56f3-aab2-d64fd24fb703)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bpmn-io/min-dash purl2cpe 2026-06-01 10:12:46.173688
pkg:maven/org.webjars.npm/min-dash purl2cpe 2026-06-01 10:12:46.173693
pkg:npm/min-dash purl2cpe 2026-06-01 10:12:46.173696

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23460 vulnerable 2026-06-08 05:30:02.968292 Prototype Pollution
HIGH (7.5)
The package min-dash before 3.8.1 are vulnerable to Prototype Pollution via the set method due to missing enforcement of key types.
Published: 2022-01-21T20:05:13.230Z
Updated: 2024-09-16T17:15:12.528Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.