Lucene search
+L
Dot-prop ProjectDot-prop

1 matches found

CVE
CVE
added 2020/02/04 7:8 p.m.251 views

CVE-2020-8116

CVE-2020-8116: Prototype pollution in the dot-prop npm package. Affected versions are dot-prop before 4.2.1 and 5.x before 5.1.1, which can allow an attacker to add arbitrary properties to JavaScript language constructs. The vulnerability is listed among multiple issues in MiracleLinux AXSA advis...

7.5CVSS7.2AI score0.03079EPSS
Save