Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-7639 1 Dot Project 1 Dot 2026-10-08 5.3 Medium
eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
CVE-2020-8141 1 Dot Project 1 Dot 2024-11-21 8.8 High
The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.