| Package | Affected versions | Patched versions |
|---|---|---|
| dot | < 1.0.3 | 1.0.3 |
| @eivifj/dot | < 1.0.3 | 1.0.3 |
eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free