Dot-prop ProjectDot-prop
1 matches found
CVE-2020-8116
CVE-2020-8116: Prototype pollution in the dot-prop npm package. Affected versions are dot-prop before 4.2.1 and 5.x before 5.1.1, which can allow an attacker to add arbitrary properties to JavaScript language constructs. The vulnerability is listed among multiple issues in MiracleLinux AXSA advis...
7.5CVSS7.2AI score0.03079EPSS
Save