Read the docs

Dot-prop Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Dot-prop Project records in CISA KEV

No Dot-prop Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dot-prop 1 record LOW

Records

1 record

TI-2020-06534 CVE-2020-8116 · GHSA-ff7x-qrg7-qggm

Prototype pollution in dot-prop

Priority LOW 38

Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03079 Published 2020-02-04 Partial fix · 4.2.1, 5.1.1 CWE-471
Open these records in search →