CVE-2026-107701

The dot-access library (version 1.0.0 ) is vulnerable to a Prototype Pollution vulnerability (CWE-1321) via the set() path argument. By supplying a crafted dotted path containing proto segments—specifically when attackers control the path through user-supplied field names—an attacker can modify O...