Dot Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dot Project products: 1 record(s), with severity, exploitation and fixes.

Dot 1

Exploited only (KEV) →

CVE-2020-7639 Medium · 5.3 CWE-1321 Apr 6, 2020

Prototype Pollution in Dot Project Dot

eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.