4 matches found
CVE-2023-26106
All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...
7.5CVSS7.5AI score0.00947EPSS
SaveExploits1References2
CVE-2023-26106
All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...
7.5CVSS7.1AI score0.00947EPSS
SaveExploits1References2
CVE-2023-26106
CVE-2023-26106 (dot-lens) : Multiple connected sources confirm a Prototype Pollution flaw via the set() function in index.js, affecting all versions of the dot-lens package. Root cause: prototype contamination through set(), enabling unexpected modifications to objects. Reported impact is high (C...
7.5CVSS7.5AI score0.00947EPSS
SaveExploits1References2Affected Software1
20