Read the docs

Dotty Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Dotty Project records in CISA KEV

No Dotty Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dotty 2 records MEDIUM

Records

2 records in Dotty · all components

TI-2021-07922 CVE-2021-25912 · GHSA-f5c9-x9j6-87qp

Prototype pollution in dotty

Priority MEDIUM 48

Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03481 Published 2021-02-02 Fixed in 0.1.1 CWE-1321
TI-2021-06171 CVE-2021-23624 · GHSA-6g47-63mv-qpgh

Prototype pollution in dotty

Priority MEDIUM 45

This affects the package dotty before 0.1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01283 Published 2021-11-03 Fixed in 0.1.2 CWE-843
Open these records in search →