PT-2020-6070 · Npm +4 · Dot-Prop +4

Name of the Vulnerable Software and Affected Versions: dot-prop versions before 4.2.1 dot-prop versions 5.x before 5.1.1 Description: The issue allows an attacker to add arbitrary properties to JavaScript objects, which can lead to a prototype pollution attack. This can be exploited by a remote...