Dottie Project vulnerabilities
We track 1 vulnerability in Dottie Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Dottie Project vulnerabilities
- 9.8 Critical severity
dottie.js: Improperly Controlled Modification of Object Prototype Attributes
Dottie provides nested object access and manipulation in JavaScript. Versions 2.0.4 through 2.0.6 contain an incomplete fix for CVE-2023-26132. The prototype pollution guard introduced in commit `7d3aee1` only validates the first segment of a dot-separated pat