A vulnerability was found in dref 0.1.2. It has been classified as problematic. This affects the function
lib.set. This manipulation causes improperly controlled modification of object prototype attributes (‘prototype pollution’).
This vulnerability is registered as CVE-2025-26278. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
