CVE-2020-7639

eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload...

CVE-2020-7639

Summary: CVE-2020-7639 affects the eivindfjeldstad-dot package prior to 1.0.3. The vulnerability is a Prototype Pollution flaw in the package’s set function, which can be triggered with a proto payload to add or modify properties on Object.prototype. The Red Hat, GHSA, OSV, CNVD, CVE, CVELIST ent...