Dexie vulnerabilities
We track 1 vulnerability in Dexie products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Dexie vulnerabilities
- 9.8 Critical severity
dexie: Improperly Controlled Modification of Object Prototype Attributes
The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPath(obj, keyPath, value) function which does not properly check the keys being set (like __proto__ or constructor). This can