Vendor/product archive

dot_project / dot CVEs

Beta · best-effort

2 CVEs tagged to dot_project / dot — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dot_project vendor archive

CVE-2020-7639

Published Apr 6, 2020

eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-8141

Published Mar 15, 2020

The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on O…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1