Dottie vulnerabilities
We track 1 vulnerability in Dottie products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Dottie vulnerabilities
- 7.5 High severity
dottie: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable in the /dottie.js file.