Advisory Weakness Curation

Prototype Pollution in sds Affected versions of `sds` are vulnerable to prototype pollution. The `set` function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. ## Recommendation Upgrade to version 4.0.0 or later

Improper Input Validation sds is vulnerable to Prototype Pollution. The library could be tricked into adding or modifying properties of the `Object.prototype` by abusing the `set` function located in `js/set.js`.