Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/02/26 2:0 p.m.3 views

CVE-2026-27837

A flaw was found in dottie.js, a JavaScript library for nested object access and manipulation. An incomplete fix for a previous vulnerability allows a remote attacker to bypass prototype pollution protection by placing 'proto' at any position other than the first in a dot-separated path. This...

9.8CVSS5.6AI score0.00165EPSS
Exploits2References6
RedhatCVE
RedhatCVE
added 2025/05/23 3:27 a.m.2 views

CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

7.5CVSS6.7AI score0.00125EPSS
Exploits2References1
OSV
OSV
added 2023/06/10 6:30 a.m.0 views

GHSA-4GXF-G5GF-22H4 dottie vulnerable to Prototype Pollution

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

7.5CVSS5.9AI score0.00165EPSS
Exploits3References5
NVD
NVD
added 2023/06/10 5:15 a.m.9 views

CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

7.5CVSS7.5AI score0.00125EPSS
Exploits2References3
OSV
OSV
added 2023/06/10 5:15 a.m.14 views

CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

7.5CVSS7AI score
Exploits0References3
OSV
OSV
added 2023/06/10 5:15 a.m.0 views

UBUNTU-CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

7.5CVSS7.1AI score0.00125EPSS
Exploits2References5
Prion
Prion
added 2023/06/10 5:15 a.m.12 views

Design/Logic Flaw

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

5CVSS7.5AI score0.00125EPSS
Exploits2References3Affected Software1
Debian CVE
Debian CVE
added 2023/06/10 5:0 a.m.18 views

CVE-2023-26132

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set function and the current variable in the /dottie.js file...

7.5CVSS7.4AI score0.00125EPSS
Exploits2
Positive Technologies
Positive Technologies
added 2023/06/10 12:0 a.m.1 views

PT-2023-20511

Name of the Vulnerable Software and Affected Versions dottie versions prior to 2.0.4 Description The issue is related to Prototype Pollution due to insufficient checks. It can be exploited via the set function and the current variable in the /dottie.js file. Recommendations For versions prior to...

7.5CVSS7.1AI score0.00125EPSS
Exploits2References17
Rows per page
Query Builder