CVE-2021-23450: Debian Linux

Critical severity, CVSS 9.8. EPSS: 30.4% chance of exploitation in the next 30 days.

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

Affected products

• Debian Debian Linux: version 10.0 only
• Linuxfoundation Dojo: before 1.17.0 (fixed in 1.17.0)
• Oracle Communications Policy Management: version 12.6.0.0.0 only
• Oracle Primavera Unifier: from 17.7, up to and including 17.12; version 18.8 only; version 19.12 only; version 20.12 only; version 21.12 only
• Oracle WebLogic Server: version 12.2.1.4.0 only; version 14.1.1.0.0 only

Published 2021-12-17. Last modified 2026-10-08.