dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2020-02-18T15:57:37
Updated: 2024-08-04T22:32:02.167Z
Reserved: 2019-04-03T00:00:00
Link: CVE-2019-10793
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-02-18T16:15:10.327
Modified: 2020-02-27T17:00:39.257
Link: CVE-2019-10793
Redhat
No data.