csv-interact (>=0.0.1 <=1.0.0), jb55-json2csv (>=3.0.0 <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (=1.2.3)

dot-lens NPM version =1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser =0.0.1 Source cves: CVE-2023-26106 Source advisory: OSV:GHSA-RMHG-2CVV-Q7VX...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

CVE-2023-26106 (dot-lens) : Multiple connected sources confirm a Prototype Pollution flaw via the set() function in index.js, affecting all versions of the dot-lens package. Root cause: prototype contamination through set(), enabling unexpected modifications to objects. Reported impact is high (C...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

csv-interact (>=0.0.1 <=1.0.0), jb55-json2csv (>=3.0.0 <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (=1.2.3)

dot-lens NPM version =1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser =0.0.1 Source cves: CVE-2023-26106 Source advisory: SNYK:JS-DOTLENS-3227646...