VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

dojo ✕Clear filters

5 results

ID	Severity	Summary	Published
CVE-2021-23450	CRITICAL9.8	All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.	17/12/2021
CVE-2020-5258	HIGH7.7	In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes to overwrite, or pollute, a JavaScript ap	10/03/2020
CVE-2015-5654	MEDIUM4.3	Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	11/10/2015
CVE-2010-2273