Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

dot_project CVEs

Beta · best-effort

2 CVEs tagged to vendor dot_project — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filtersView vendor evidence profileExplore

CVE-2020-7639

Published Apr 6, 2020

eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2020-8141

Published Mar 15, 2020

The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on O…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1