dot-lens vulnerable to Prototype Pollution

高危 7.5CVE-2023-26106 · GHSA-rmhg-2cvv-q7vx · Published 06/03/2023 · updated 17/06/2026

要点

Package	Affected versions	Patched versions
dot-lens dot-lens_project	`≤ 1.2.3`	No fix yet
dot-lens npm	`≤ 1.2.3`	No fix yet

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.

NVD description

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.